4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(r3)

23:47:59 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1935.539681] audit: type=1804 audit(1588722478.946:11245): pid=19802 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/1989/bus" dev="sda1" ino=17281 res=1
[ 1935.579416] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:47:59 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:47:59 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(r3)

[ 1935.663824] xt_CONNSECMARK: invalid mode: 0
[ 1935.882793] audit: type=1804 audit(1588722479.286:11246): pid=19812 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/1990/bus" dev="sda1" ino=17431 res=1
23:47:59 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:47:59 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:47:59 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(r3)

[ 1936.088983] xt_CONNSECMARK: invalid mode: 0
23:47:59 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:47:59 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(r3)

[ 1936.185323] xt_CONNSECMARK: invalid mode: 0
23:48:00 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:00 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:00 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(r3)

[ 1937.075721] xt_CONNSECMARK: invalid mode: 0
23:48:00 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:01 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
dup(r3)

23:48:01 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:01 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:01 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
dup(r3)

[ 1938.060757] xt_CONNSECMARK: invalid mode: 0
23:48:01 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:01 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1938.384516] xt_CONNSECMARK: invalid mode: 0
23:48:01 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0)
dup(r3)

23:48:01 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040))
dup(r3)

[ 1938.452423] xt_CONNSECMARK: invalid mode: 0
23:48:02 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040))
dup(r3)

[ 1938.708102] xt_CONNSECMARK: invalid mode: 0
23:48:02 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:02 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040))
dup(r3)

23:48:02 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1939.150870] xt_CONNSECMARK: invalid mode: 0
[ 1939.238938] xt_CONNSECMARK: invalid mode: 0
23:48:02 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:02 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:02 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1939.477546] xt_CONNSECMARK: invalid mode: 0
23:48:03 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1939.955812] xt_CONNSECMARK: invalid mode: 0
23:48:03 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:03 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:03 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r2, 0x407, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:04 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:04 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:04 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)

23:48:05 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:05 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:05 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000180)=""/76)

23:48:05 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:06 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:06 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:06 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:06 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:06 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000380)=0xc)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, r6, r7, 0xffffffffffffffff, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x66e3, 0x0, 0x0, 0x5})
fchown(r0, r4, r7)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x81, 0x1, 0x8001, 0xfb, "009859371b7848a0074424d4af6d1da17fb4f8", 0x1, 0x7})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000900)={0x0, @ctrl})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x3a8, 0x208, 0x3a8, 0x2d8, 0xd0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xffffffff], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [0xffffffff], [], 'veth1\x00', 'ip6tnl0\x00', {0xff}, {}, 0x29}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010100}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, [], [0x0, 0xffffffff], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0xe4, 0x80, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
socket$bt_bnep(0x1f, 0x3, 0x4)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000180))

23:48:07 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:07 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:07 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:07 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r4, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:07 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:08 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000000)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r6=>0x0, <r7=>0x0}, &(0x7f0000000380)=0xc)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000300)={{0x1, r6, r7, 0xffffffffffffffff, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x66e3, 0x0, 0x0, 0x5})
fchown(r0, r4, r7)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0x0, 0x81, 0x1, 0x8001, 0xfb, "009859371b7848a0074424d4af6d1da17fb4f8", 0x1, 0x7})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f0000000900)={0x0, @ctrl})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x64, 0x6, 0x598, 0x3a8, 0x208, 0x3a8, 0x2d8, 0xd0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [0x0, 0x0, 0xffffffff], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [0xffffffff], [], 'veth1\x00', 'ip6tnl0\x00', {0xff}, {}, 0x29}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x5}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010100}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, [], [0x0, 0xffffffff], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0xe4, 0x80, 0x1}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8)
socket$bt_bnep(0x1f, 0x3, 0x4)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r8, 0x80045400, &(0x7f0000000180))

23:48:08 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:08 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:08 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:09 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x7)
recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f0000000480)=""/125, 0x7d}, {&(0x7f0000000500)=""/51, 0x33}, {&(0x7f00000006c0)=""/124, 0x7c}], 0x4, &(0x7f0000000600)=""/104, 0x68}, 0x66a}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x103, 0x4, {0x100, 0xfff, 0x2f, 0x2}})
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0xb0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40)

23:48:09 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:09 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:10 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x1000, 0x6, @scatter={0x5, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000003040)=""/4096, 0x1000}]}, &(0x7f0000004040)="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", &(0x7f0000000580)=""/176, 0x6, 0x24, 0xffffffffffffffff, &(0x7f0000000240)})
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0x7, 0xccc6])
r4 = socket(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000006c0)={{0x5, 0x4}, 0x1, 0x9, 0x7, {0x1, 0x1}, 0x0, 0x2})
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4801000024000b0d000000000040000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x148}}, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

23:48:10 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:10 executing program 3:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x400)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000640)={0x53, 0xfffffffffffffffd, 0x1000, 0x6, @scatter={0x5, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000003040)=""/4096, 0x1000}]}, &(0x7f0000004040)="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", &(0x7f0000000580)=""/176, 0x6, 0x24, 0xffffffffffffffff, &(0x7f0000000240)})
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000100)=[0x7, 0xccc6])
r4 = socket(0x10, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f00000006c0)={{0x5, 0x4}, 0x1, 0x9, 0x7, {0x1, 0x1}, 0x0, 0x2})
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4801000024000b0d000000000040000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x148}}, 0x0)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)

23:48:10 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:10 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:10 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000180)={0x0, 0xa, 0x4, 0x10000, 0x9, {0x0, 0xea60}, {0x2, 0x2, 0x7, 0x9, 0x4, 0x40, "671b5c62"}, 0x7f, 0x2, @fd=r3, 0x3ff, 0x0, <r5=>r2})
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000002c0)={@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @empty}, 0x3, 0x3, 0x2}}, {&(0x7f0000000200)=""/80, 0x50}, &(0x7f0000000100)}, 0xa0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)

23:48:11 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:11 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1947.672785] xt_CONNSECMARK: cannot load conntrack support for proto=10
23:48:11 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:11 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'sit0\x00'})
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000180)={0x0, 0xa, 0x4, 0x10000, 0x9, {0x0, 0xea60}, {0x2, 0x2, 0x7, 0x9, 0x4, 0x40, "671b5c62"}, 0x7f, 0x2, @fd=r3, 0x3ff, 0x0, <r5=>r2})
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000002c0)={@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e23, @empty}, 0x3, 0x3, 0x2}}, {&(0x7f0000000200)=""/80, 0x50}, &(0x7f0000000100)}, 0xa0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
pipe(0x0)

23:48:11 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:12 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:12 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:12 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:12 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:12 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x1, r4})
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:12 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:13 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:13 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:13 executing program 5 (fault-call:7 fault-nth:0):
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:13 executing program 3 (fault-call:11 fault-nth:0):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1949.869809] audit: type=1804 audit(1588722493.277:11247): pid=20280 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2002/bus" dev="sda1" ino=17476 res=1
[ 1949.912949] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1949.995447] FAULT_INJECTION: forcing a failure.
[ 1949.995447] name failslab, interval 1, probability 0, space 0, times 0
[ 1950.204191] CPU: 0 PID: 20290 Comm: syz-executor.3 Not tainted 4.14.179-syzkaller #0
[ 1950.212107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1950.221467] Call Trace:
[ 1950.224072]  dump_stack+0x13e/0x194
[ 1950.227714]  should_fail.cold+0x10a/0x14b
[ 1950.231877]  should_failslab+0xd6/0x130
[ 1950.235859]  kmem_cache_alloc_trace+0x2db/0x7b0
[ 1950.240531]  ? inode_has_perm.isra.0+0x153/0x1d0
[ 1950.245327]  alloc_pipe_info+0xaa/0x380
[ 1950.249309]  splice_direct_to_actor+0x581/0x730
[ 1950.253984]  ? generic_pipe_buf_nosteal+0x10/0x10
[ 1950.258830]  ? do_splice_to+0x150/0x150
[ 1950.262810]  ? rw_verify_area+0xe1/0x2a0
[ 1950.266877]  do_splice_direct+0x164/0x210
[ 1950.271029]  ? splice_direct_to_actor+0x730/0x730
[ 1950.275885]  ? rw_verify_area+0xe1/0x2a0
[ 1950.279959]  do_sendfile+0x469/0xaf0
[ 1950.283683]  ? do_compat_pwritev64+0x140/0x140
[ 1950.288276]  SyS_sendfile64+0xff/0x110
[ 1950.292164]  ? SyS_sendfile+0x130/0x130
[ 1950.296139]  ? do_syscall_64+0x4c/0x640
[ 1950.300114]  ? SyS_sendfile+0x130/0x130
[ 1950.304093]  do_syscall_64+0x1d5/0x640
[ 1950.307989]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1950.313173] RIP: 0033:0x45c829
[ 1950.316360] RSP: 002b:00007fd3df0aac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1950.324069] RAX: ffffffffffffffda RBX: 00000000004fc2e0 RCX: 000000000045c829
[ 1950.331340] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[ 1950.338611] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000
[ 1950.345884] R10: 0000000000008482 R11: 0000000000000246 R12: 000000000000000a
[ 1950.353156] R13: 00000000000008dc R14: 00000000004cb816 R15: 00007fd3df0ab6d4
23:48:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1950.551310] xt_CONNSECMARK: invalid mode: 0
23:48:14 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d80000010000000000000000000000000000000000000000000000003000756470000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1951.208988] audit: type=1804 audit(1588722494.617:11248): pid=20326 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2003/bus" dev="sda1" ino=17486 res=1
[ 1951.290808] audit: type=1804 audit(1588722494.687:11249): pid=20331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2003/bus" dev="sda1" ino=17486 res=1
23:48:14 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x300, 0x0, 0x0, 0x0, 0xf8, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000400)={0x58fb, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]})
ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000000)=0x7fff)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380)=@gcm_256={{0x303}, "ce26e60ec184ead7", "28214545d00cb4f53d6e72390c5ebcbb993bad8de948127d0e843b2037ac8e6c", "2425fdfe", "6701c344a09b87c0"}, 0x38)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getpeername$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10)
read$fb(r4, &(0x7f0000000100)=""/118, 0x76)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x800, 0x0)
ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000340)={0x0, 0x0, {0xd, 0xe, 0x15, 0x18, 0xb, 0x196f, 0x0, 0x49, 0xffffffffffffffff}})
dup(0xffffffffffffffff)

23:48:14 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fstatfs(r3, &(0x7f0000000600)=""/162)
ftruncate(r2, 0x2007fff)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000006c0)={0x0, 'ipvlan1\x00', 0x3}, 0x18)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000000)={0x0, &(0x7f00000000c0)="c55a101a6b41867e64ad827dd1625943ffe0aeea87dc806382972025f9969894b8b04a5b3bdbe5a4a884527fbdd665669fc3d87c31cbaf3aa79375ef20113c2f9e1e2c84b5ae97dad3a447eb50a6011758e4ae4a2382e668fec15b59284b7dff2baf6fcfcaf1a814f81adcd8118a2c9a759a1c604c2027a70da80ae79da8454bd782b76085c793ca1043f7fc99f771e1", 0x90})
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

[ 1951.439249] audit: type=1800 audit(1588722494.697:11250): pid=20326 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17486 res=0
[ 1951.481335] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1951.526121] audit: type=1800 audit(1588722494.697:11251): pid=20331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17486 res=0
23:48:15 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:15 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1951.830179] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:15 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(0x0, 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:15 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(0x0, 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1952.292732] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[ 1952.383635] audit: type=1804 audit(1588722495.787:11252): pid=20354 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2004/bus" dev="sda1" ino=17213 res=1
[ 1952.546777] audit: type=1804 audit(1588722495.817:11253): pid=20364 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2004/bus" dev="sda1" ino=17213 res=1
23:48:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:16 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:16 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(0x0, 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1952.686489] audit: type=1804 audit(1588722495.817:11254): pid=20387 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2004/bus" dev="sda1" ino=17213 res=1
23:48:16 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmat(r1, &(0x7f0000e3a000/0x3000)=nil, 0x4000)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r2 = pkey_alloc(0x0, 0x0)
pkey_free(r2)
r3 = pkey_alloc(0x0, 0x0)
pkey_free(r3)
r4 = pkey_alloc(0x0, 0x0)
ptrace$getsig(0x4202, 0x0, 0x2, &(0x7f0000000180))
pkey_free(r4)
pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, r2)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x0, 0x5, 0x40, 0x8, 0x7, 0xe0})
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000000208030000000000000000000c00000105000300840000002400048008000740800000000800014000000002080004400000000208000440000001010600024000f600000900010073797a300000000006000240886400000900010073797a3100000000050003002f000000"], 0x70}, 0x1, 0x0, 0x0, 0x20044000}, 0x10)

23:48:16 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:16 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./bus\x00'}, 0x10)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:16 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCSETX(r5, 0x5433, &(0x7f0000000100)={0x7, 0x3ff, [0x4f4b, 0x6, 0xfffa, 0x2, 0x400], 0x401})
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'dummy0\x00'})
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x8})
ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @remote}, 0x8, {0x2, 0x0, @loopback}})
r7 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000240)='0', 0x1, r7)
keyctl$get_keyring_id(0x0, r7, 0x8)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:17 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1953.531065] audit: type=1804 audit(1588722496.937:11255): pid=20430 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2005/bus" dev="sda1" ino=17490 res=1
[ 1953.538954] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1953.635925] xt_CONNSECMARK: invalid mode: 0
[ 1953.657363] audit: type=1804 audit(1588722497.067:11256): pid=20439 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2005/bus" dev="sda1" ino=17490 res=1
[ 1953.664646] xt_CONNSECMARK: invalid mode: 0
[ 1953.746545] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:17 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:17 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000600)={"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"})
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fchdir(r6)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a00)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d97f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f552711ec40000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff2af5cbf3ef31983ade3a344df3259949fe44d868edc6fb94e3436259cb9c0447fe5e716d45499159921300364e3026278c3016a442c36559d4dff2e90cf75aed33dd1aafe63da1b5aa95787a785efb73d3a6abe4cf1f7b99d546b966da29a99a2497d3d7d8740c6deeea80de546fcf798b8cdf3fb5717ed71dc5f9bb0f858c6e631b29d91450"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:17 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:17 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:18 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:18 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ff5000/0x4000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:18 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$cgroup_type(r2, &(0x7f00000004c0)='threaded\x00', 0x9)
r3 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x2001, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x148, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x59b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x21c2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0xb0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37f103a8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x148}}, 0x2000044)
r5 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r5, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
clone(0x2000, &(0x7f0000000000)="e0922ae7e87c2ac21583d04765ff08cc48301ba256959abfdd2d413fa3af1abd6e79ee5fc6878bb201281642b1d0981cb9e1f8ec06d68f5a3a1abf64d0b91a20e857733ae5c32178bfd8ed97232c176d3f1667a0a25b1595ff71706938f5f7b77b49bf31541abf9f867f27467946139f3e5b610815f38a6869360582d7e8dbf673fb5023f576f6a4f646e35dd995cf8ed2b09a9326bd6af7ecfdbd741b6d9291bb155b1e47c569978ebef1500d8aa90cedef57e3edfd0daabffeadd14916beabc43941e1627ee49bf7ab128af2bee8cb322c1334026e9b81ce2b", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="1c6ba4da450964fed91bfe003fd0ea813e91e404ff41de91e5b45412185df54bea62aa67ef5a29858ca6017b5d430ccb89e20e0d7f")
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000480)={0xfffe, 0x789, 0x980e, 0x6, 0x5, 0x1a, 0xe, "b6fee3becc06ef86daf56971da09c9c65c8e94bf", "680d993a45dcf4b2a0da574b65a42e7cda7794cb"})

23:48:18 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1955.108183] kauditd_printk_skb: 4 callbacks suppressed
[ 1955.108192] audit: type=1804 audit(1588722498.517:11261): pid=20472 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2006/bus" dev="sda1" ino=17213 res=1
[ 1955.238727] audit: type=1804 audit(1588722498.517:11262): pid=20506 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2006/bus" dev="sda1" ino=17213 res=1
[ 1955.400310] audit: type=1804 audit(1588722498.517:11263): pid=20505 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2006/bus" dev="sda1" ino=17213 res=1
23:48:19 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
set_tid_address(&(0x7f0000000000))

23:48:19 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000200))
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_tcp_buf(r7, 0x6, 0x1c, &(0x7f0000000100)=""/115, &(0x7f00000001c0)=0x73)

23:48:19 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:19 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:19 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1955.689740] xt_CONNSECMARK: invalid mode: 0
[ 1955.696528] audit: type=1804 audit(1588722499.107:11264): pid=20532 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2007/bus" dev="sda1" ino=16279 res=1
[ 1955.711240] xt_CONNSECMARK: invalid mode: 0
23:48:19 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1955.824475] audit: type=1804 audit(1588722499.167:11265): pid=20532 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2007/bus" dev="sda1" ino=16279 res=1
23:48:19 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x3)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = accept(r1, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x80)
r5 = socket(0x80000000000000a, 0x2, 0x0)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={r7, 0x6, 0x20}, 0xc)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r9, &(0x7f0000000200)='threaded\x00', 0x175d900f)
connect$inet6(r9, &(0x7f0000000140)={0xa, 0x4e21, 0x3f, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3e}}, 0x8}, 0x1c)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0xffffffff})
dup(0xffffffffffffffff)

23:48:20 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:20 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:20 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000000))

[ 1956.656691] xt_CONNSECMARK: invalid mode: 0
[ 1956.722624] xt_CONNSECMARK: invalid mode: 0
[ 1956.738223] audit: type=1804 audit(1588722500.147:11266): pid=20550 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2007/bus" dev="sda1" ino=16279 res=1
[ 1956.864020] audit: type=1804 audit(1588722500.167:11267): pid=20577 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2007/bus" dev="sda1" ino=16279 res=1
23:48:20 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r2)
fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x0, 0x3, 0x8, 0x4, r2})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r3 = open(&(0x7f0000000000)='./file0\x00', 0xc0001, 0x40)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x0, 0x4)
ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000040))

23:48:20 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r4 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x501280)
accept4$phonet_pipe(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x8481)

23:48:20 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff28cdd107b5344740fc9fd72aff6c2c04a9767adccc4c919c"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1956.864825] audit: type=1804 audit(1588722500.167:11268): pid=20581 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2007/bus" dev="sda1" ino=16279 res=1
[ 1957.036219] audit: type=1804 audit(1588722500.447:11269): pid=20603 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2008/bus" dev="sda1" ino=16536 res=1
23:48:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1957.045671] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1957.118072] audit: type=1804 audit(1588722500.527:11270): pid=20608 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2009/bus" dev="sda1" ino=16536 res=1
23:48:21 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1957.127862] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1957.266565] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1957.739570] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:21 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
dup(r4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
poll(&(0x7f0000000000)=[{r5, 0x30}, {r6, 0x4}], 0x2, 0x0)

[ 1957.862207] xt_CONNSECMARK: invalid mode: 0
23:48:21 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, 0x2, 0x20})
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0x5)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r8, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000200)=0x7)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="10c07fc1ac65a4d952b04da24f0d97cc16e41c454eac285c6a45c639464652b79be18bcc6f80a735adfaf36569d603a751196f9f6263479d6dd54c114af817c083f1f641e547e28f5c06b1db044fae27917cd32e15d5b49ea769fa35c2cfe4c83efdcee58ac782e60ac71915fd5ee597fa527d0a82cae0736bc538bac2084d671be50a8548a2ad7d0cdfdb8e83d73f825c3b46881082d4e4231095c811ba0794ea27d873fe6d2e89828e450a3e05c6b889d002c7898248854ce54ef8e9"], 0x4)
socket$inet6(0xa, 0x1, 0x0)

[ 1957.882801] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:21 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:22 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:22 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050400000000000000005f000000"], 0x14}}, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x8000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0xfffffffe, {}, {0x0, 0x0, 0x1}, {0x0, 0x20000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x2})
dup(0xffffffffffffffff)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff7, <r8=>0x0, 0x1, 0xae})
ioctl$DRM_IOCTL_SG_ALLOC(r6, 0xc0106438, &(0x7f0000000100)={0x40, r8})

23:48:22 executing program 4:
shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r0 = shmget(0x3, 0x3000, 0x54000000, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 1958.667868] xt_CONNSECMARK: invalid mode: 0
23:48:22 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r1)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x75c, &(0x7f0000000000)=""/18)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:22 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000b4a000/0x4000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

[ 1958.791715] xt_CONNSECMARK: invalid mode: 0
23:48:22 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:22 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040))
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xfffffc00, 0x1002})

[ 1958.826048] xt_CONNSECMARK: invalid mode: 0
23:48:22 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x0, 0x298, 0x298, 0x298, 0x368, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0x160, 0x1a0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@srh1={{0x90, 'srh\x00'}, {0x3c, 0x7f, 0x1, 0xff, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, @loopback, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffff00], [0x0, 0xff, 0xff, 0xffffff00], 0x20, 0x242}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x31, 0x0, @ipv4=@local}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x36}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6_vti0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/66)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'rose0\x00', {0x2, 0x4e20, @empty}})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x5}})
dup(0xffffffffffffffff)

23:48:22 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1959.156763] xt_CONNSECMARK: invalid mode: 0
23:48:22 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt(r0, 0x6c02, 0x2, &(0x7f0000000600)="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", 0x1000)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = socket$inet6(0xa, 0x5, 0x5)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

[ 1959.202161] xt_CONNSECMARK: invalid mode: 0
[ 1959.394807] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:22 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:22 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:22 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1959.576042] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:23 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @remote}, 0xcb00}, @in6={0xa, 0x4e23, 0x2, @local, 0x6}, @in={0x2, 0x4e22, @multicast1}], 0x48)
ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000000))
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:23 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1959.837383] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:23 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x0, 0x7, 0x4, 0xe000, 0x4, {}, {0x4, 0x8, 0x4, 0x7, 0x9f, 0x40, "787cfd51"}, 0x40, 0x3, @fd=r2, 0xa3, 0x0, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000080)={0x3, 'bond_slave_1\x00', {0x8}, 0x2})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:23 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:23 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:24 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

[ 1960.685216] kauditd_printk_skb: 17 callbacks suppressed
[ 1960.685226] audit: type=1804 audit(1588722504.088:11288): pid=20754 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2013/bus" dev="sda1" ino=16851 res=1
[ 1961.173237] audit: type=1804 audit(1588722504.578:11289): pid=20756 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2013/bus" dev="sda1" ino=16851 res=1
23:48:24 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:24 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0xaed, 0x3, 0x4, 0x20010, 0x3, {0x0, 0xea60}, {0x4, 0xc, 0x9, 0x0, 0x7, 0x0, "39f9a210"}, 0x1f, 0x1, @fd=r1, 0x9, 0x0, r0})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffffe)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = socket$inet6(0xa, 0x3, 0x2c)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc884}, 0x85)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000000000000"], 0x4)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r5, r7, 0x0, 0x8482)

23:48:24 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1961.355870] audit: type=1804 audit(1588722504.608:11290): pid=20777 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2013/bus" dev="sda1" ino=16851 res=1
[ 1961.434116] audit: type=1804 audit(1588722504.608:11291): pid=20781 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2013/bus" dev="sda1" ino=16851 res=1
23:48:24 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0)

23:48:24 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:25 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000000))
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 1961.537029] audit: type=1804 audit(1588722504.608:11292): pid=20784 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2013/bus" dev="sda1" ino=16851 res=1
[ 1961.718923] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1961.895042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
23:48:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:25 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0xfffffffd}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10})
r4 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x9})

23:48:25 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)

[ 1962.392375] xt_CONNSECMARK: invalid mode: 0
23:48:25 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000002c0)={0x0, @reserved})
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syslog(0x2, &(0x7f00000001c0)=""/145, 0x91)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1962.428154] xt_CONNSECMARK: invalid mode: 0
[ 1962.812464] xt_CONNSECMARK: invalid mode: 0
[ 1962.855346] xt_CONNSECMARK: invalid mode: 0
23:48:26 executing program 4:
shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
mlock2(&(0x7f0000c6f000/0x2000)=nil, 0x2000, 0x1)
munlock(&(0x7f0000ff0000/0x1000)=nil, 0x1000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 1962.902416] audit: type=1804 audit(1588722506.308:11293): pid=20822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2014/bus" dev="sda1" ino=16851 res=1
23:48:26 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x3d0, 0x300, 0x230, 0x0, 0x3d0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
dup(r1)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r4)
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x5, 0x3, 0x70, 0x1, 0x0, 0x0, 0x31000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0xa00, 0x7, 0x1, 0x6, 0x100000000, 0x8000, 0x1}, r4, 0x7, 0xffffffffffffffff, 0x9)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x100)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16})
dup(0xffffffffffffffff)

23:48:26 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:26 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r0, 0x2007fff)
r1 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000140)=0x401)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00000000c0)=""/104, &(0x7f0000000000)=0x68)
sendfile(r1, r2, 0x0, 0x8482)

[ 1963.039871] audit: type=1804 audit(1588722506.308:11294): pid=20843 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2014/bus" dev="sda1" ino=16851 res=1
23:48:26 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x1, 0x70, 0x5, 0x34, 0x1, 0x6, 0x0, 0x1, 0x30408, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x4}, 0x220, 0x8a42, 0x43c, 0x6, 0x1000, 0x6, 0x4})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="66b8000000000f23d00f21f86635200000010f23f8650f01cff30fc7b39af10f23340f0666b9e30800000f320f08640f78492d260f01cf0f01c8", 0x3a}], 0x1, 0x42, &(0x7f0000000180), 0x0)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000040)=[{0x8, 0x9, 0x3f, 0x8001}]})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3fe43aee9bcea248a8d76c396d0b4c0b73797374656d2e23776c616e3100"], &(0x7f0000000080)='\xecppp1nodev\x00', 0xb, 0x1)

[ 1963.125018] audit: type=1804 audit(1588722506.308:11295): pid=20846 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2014/bus" dev="sda1" ino=16851 res=1
23:48:26 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)

23:48:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1963.252747] audit: type=1804 audit(1588722506.478:11296): pid=20889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2015/bus" dev="sda1" ino=16969 res=1
[ 1963.376185] audit: type=1804 audit(1588722506.498:11297): pid=20889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2015/bus" dev="sda1" ino=16969 res=1
23:48:27 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:27 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x556, 0x0, 0x0, 0x258, 0x69, 0x4, 0x10, 0x1, {}, {0x0, 0x6}, {0x0, 0x4}, {}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
dup(0xffffffffffffffff)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000100))

23:48:27 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)

23:48:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:28 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0xd8, 0x1000, 0x200})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000080))
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = dup(r2)
getpeername$l2tp(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10)

23:48:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x2, 0x0, @local, 0xff}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1964.780678] net_ratelimit: 1 callbacks suppressed
[ 1964.780683] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1964.869205] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:28 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:28 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140), 0x0, 0x0)

23:48:28 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000000)={0x1, r2})
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:28 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140), 0x0, 0x0)

[ 1965.447539] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:29 executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:29 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x80000000, 0x4}, {}, {0x4}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
dup(0xffffffffffffffff)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20440, 0x0)
ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000100))

[ 1965.959486] xt_CONNSECMARK: invalid mode: 0
23:48:29 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)

23:48:29 executing program 0:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x50242, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000140))
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000140), 0x0, 0x0)

23:48:29 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000000)=0x40004f)

23:48:29 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:29 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1965.980108] QAT: Invalid ioctl
[ 1966.242526] xt_CONNSECMARK: invalid mode: 0
[ 1966.338004] xt_CONNSECMARK: invalid mode: 0
[ 1966.366170] xt_CONNSECMARK: invalid mode: 0
[ 1966.421404] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1966.432381] kauditd_printk_skb: 11 callbacks suppressed
[ 1966.432390] audit: type=1804 audit(1588722509.848:11309): pid=21002 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2017/bus" dev="sda1" ino=17079 res=1
23:48:30 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1966.800173] audit: type=1804 audit(1588722509.848:11310): pid=21040 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2017/bus" dev="sda1" ino=17079 res=1
23:48:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a80ad0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000000000"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1966.944886] audit: type=1804 audit(1588722509.878:11311): pid=21046 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2017/bus" dev="sda1" ino=17079 res=1
23:48:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xffffffff, 0xb}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000000)=r9)

[ 1967.062065] audit: type=1804 audit(1588722510.388:11312): pid=21064 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2018/bus" dev="sda1" ino=17068 res=1
23:48:30 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

23:48:30 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1967.233880] audit: type=1804 audit(1588722510.448:11313): pid=21068 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2018/bus" dev="sda1" ino=17068 res=1
[ 1967.273732] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:30 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0xd3}]}}}], 0x18}}], 0x1, 0x0)

[ 1967.368527] audit: type=1800 audit(1588722510.458:11314): pid=21064 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17068 res=0
23:48:30 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x400c55cb)

23:48:30 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000840)={0x101, 0x8, 0xfffffff7, {0x81, 0x1000}, 0x9, 0x274})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d8, 0x3a8, 0x0, 0x310, 0x310, 0x310, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, &(0x7f00000000c0), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, 0xffffffff, 0x0, 'veth0_vlan\x00', 'gretap0\x00', {0xff}, {0xff}, 0x73, 0x0, 0x24}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8, 'conntrack\x00'}, {{@ipv4=@broadcast, [0xff000000, 0x0, 0xffffff00, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xffffffff, 0xffffffff], @ipv4=@rand_addr=0x64010101, [0xffffff00, 0xffffffff, 0xff, 0xff000000], @ipv4=@private=0xa010101, [0x0, 0xffffffff, 0x7f, 0xffffff00], 0x80000000, 0x81, 0x62, 0x4e21, 0x4e20, 0x4e21, 0x4e24, 0x0, 0x2801}, 0x1, 0x8c0, 0x4e21, 0x4e23, 0x4e21, 0x4e23}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x1, 0x801, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x9b, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x3}}, @common=@inet=@tos={{0x28, 'tos\x00'}, {0x6, 0x3, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x82}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff0000ff, 0xff, 'vcan0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x73, 0x0, 0x10}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x81}}}, {{@ip={@broadcast, @empty, 0xff, 0xffffffff, 'ip6tnl0\x00', 'veth0\x00', {0xff}, {}, 0x99, 0x3, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000280)=0xfff, 0x4)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x4)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x2})
r3 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000240)='0', 0x1, r4)
keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000140)='mangle\x00', &(0x7f0000000180))
shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000)
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0xff0000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff)

[ 1967.475407] audit: type=1800 audit(1588722510.458:11315): pid=21068 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17068 res=0
23:48:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

[ 1967.597057] audit: type=1804 audit(1588722510.668:11316): pid=21077 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2019/bus" dev="sda1" ino=17079 res=1
[ 1967.755989] xt_CONNSECMARK: invalid mode: 0
[ 1967.771702] audit: type=1804 audit(1588722510.728:11317): pid=21077 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2019/bus" dev="sda1" ino=17079 res=1
23:48:31 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:31 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x8de)

[ 1968.125096] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1968.185088] audit: type=1804 audit(1588722511.588:11318): pid=21089 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2019/bus" dev="sda1" ino=17079 res=1
23:48:31 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, {}, {}, {0x80000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd})
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1)
dup(0xffffffffffffffff)

23:48:31 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdOo=', @ANYBLOB=',wfdno', @ANYBLOB=','])

23:48:31 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x210241, 0x31)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:31 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:32 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000001c80)={0x8001000, 0x0, 0x2})
socket$l2tp(0x2, 0x2, 0x73)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x68)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdb51b548dcf0df2507000043000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000050)
write$FUSE_DIRENT(r2, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x4)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmmsg(r6, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)="16a65dcdbd89e044c70b34684d1181bb8426c1ea282d4d9355e98cc68a7d8f593ba1c39f176cde791370927be82bff817f365c3ed0a6c98d1fb22041c52de80039ebe4301b9b274e0c9e52c4005d9c0a245818458128a6", 0x57}, {&(0x7f00000006c0)="e6902d5b1cf7ae2cc3680a7dd0a0c39cf48ca90ea6d4f4789f22de24bfebfbfab69442946268ec3c9154c3aa0fb3c8acac5bcda4ea9c8cc30ebf82ff91b4d84f2090c5289dc9fd6ea79bbce10f59d368576292e535c6c6e79de4b59f8b33162e2efe7c157e154bcdd8f3279e6a7060f269407594590b927cbe26be264f87f557f25ba6", 0x83}, {&(0x7f0000000780)="187750b7b1fe6b873bbf44d895dab0a85ce63b608b08d6b6b935079d68c584eecaacb1921c78dc9bd4dc83d3617b9649cd9c6ef9431043fdf93f0d63185319c3b46ad45aaa4ab7c45eb52b93069bff921c17f415e1b5ab1287e835ddda9eb56d22757a1b8744c6a5246b7808653601abf6e7194de98f9683f5460ab8c9a16ee3de97409e4fae617e0b9b00", 0x8b}], 0x3, &(0x7f0000000880)=[{0xe8, 0x0, 0x6, "53588af5ad81709cf4e9db8eb37c48452671158994614b8003688d72cd4f74b1559b8c01206dbe1e93d1bea2b7bfd77cec19c133338311826beb099534479851d06bcb104d8cbe73cd86cc65db42d00eee3159a95f15f1a1ce0b7598b47e774700294ee4a5774a4515217ed34835f0ff0069a5b951ed5cb7678b3add4d8bf5be661279d9976cd975254db26c1575fa45f93cb69b802c5ba9498b99464de885b62025b15bcb923b08f9430c31b7aa431558413f6dd2db1785c328a820c0a3b34e6f4c352813a3dfdfed9b1020a738ebe234f362bc42663d88"}, {0x58, 0x88, 0x7, "4990fa938d185254b5d6d6cad45d8f29af58ca4a5df20a9f8268cb9c41b76898628b4290f784f0311019bba4c66549e5d37221ac03efd35127ac357d0a67f846b2dbb6"}, {0xb0, 0x110, 0x5, "8150a85f8c5ebc78e377ab1640ca5e655500d2a9ee8e4f7bbfaf2f54131304e75beec5f8751ef460b2eb6da9ab8a9a2dcc09a4c59c3dc27ddedd60603843c33240f3ad841c888f13d60823e001d2d9e9c84f20f96ae2efb659250f26f7be5de5c826bd750bbecd33a05dc332680ca0a81073283a32b1ff41a677217ec1e5b759e5a8896527f0249ece85b869cb580632396c4a9ce5e25f6630fd13df5a"}, {0x10, 0xff, 0x10000}, {0x1010, 0x112, 0x661, "c755073516f6a4804d0d3454cd17ab0b91dd5bb4c04ef9e71ac8ce9d9c8dc8abe30e115cdff92db28261a06c932c68274122149ce446f1cf66b74e4d7ec2ae11d71a25654e6daef0fb222ed2704e1711b828596c85358338a47892c85a60292ecca0567ab74a66ee2cdc71f10097aa8cd79ee831b17d1a6065dc3ab478baa6f78e91549bc6fb5d27d2e0533d1e2d5afe894380476ad22d88b87587db80aea48947aea6a8c7c698c1a956d6e211542deef37222452ea45a3f57aeb534f2cec3977d40012729290daaddaf9642cdd19a48a3a010b2ecba333f5dff5a0ff76e0b9f3a6ab4ef038bb100480632a21104eed33f17cdbb37f02de514ea9201888ebc37dc3972897896101124c3e8e1ced710f7dd709e92cf5d438d05032e590629e23d479ad79ec1f205a32a2f200fdc0a60a3c368d13a05ffbad165d1d0eda2bb3f0b062110afac05ee2aba48eb41b03b04154e607f89ed56de204f736c721b0149ab9ed07aad215b0c4d0c0207bc77b22a748bbeaaf5fd1f150230e4440a538cda3b845c8e1942ca38be27ca262088ebdc53fa7e64a5c37230da3239d99aeff9e4d7600dae68e113e1222539c52f3b0c0c61022a2652bf0790f626ff56a98bffe27c69b321519942b85f27b29d7b2c67ecb7f82f2b6ed0d4b3a8d7a9b83b08690f5cc5817d701325fdf7729df2089413f79bb21172d8cf055d8bea1155539c7ce6dd8a993cdce22faf8acbdd104f76944c896a7d9735bbe0a2b1ba3437101c0188103984e8c0119042fbe7ebabb7bf2e1906dc151f8f078d4a0cd6639c6babc2edbf09f365e41a5f1fe6fc54e084126cbf035742e739ab482f6c195f6027d27cbdcc6a5595967f92d72b2d83c83a89c60dda89f9853bfc1a422615da9fa34a3f5d0e829d1b89ef2ad29863d150d736bbb31c5e98f87260349a9e757618a5e236fcb36e20e3b21371622cfc600c4ae8070b9cffb979349e644b869bb8021f90643ad90259a5dd9c25f5bcd397f05741368cba1a52e5d3ceb3a31d3b62671535d25e7b484ccbf26a2efc86882be6d6696268989f46c9e84341aeb56cf97972b6399d3f4959b9399e68c607e2c1f366a7ca6ada50acde6b813c6e06398011021e392ccaca6ba4c05ec98a8060507704e2b6492bb04a36d57a44d09ffa42fba226cacd54719004231ab88d93120806ae6f9a962cd7d7ae9dd5484534d08e566812cfa39c3dcacb60cfbc59533001412ffee3749a3d09e864f3c31fdd2f5bdccf636b0454746098472d02be6d5635ea7baeaae3207753d72089a9fc386a34bff39376c7ba3d6e48a5774e5e55e760b7c9e0e74b4a13eda9d109f192b1a069d3284b31b2a96d7a679b8faab15788a27479d2bad9c697ac4fa2fdb22726a017a143e31b711016a86c279e0771cae86282ef01112559f9adf28f649b092ec062c5d5d04d3ac8a64eafaafb2563d3ef3129b47fc39a9f696fac78412e5fec06396a7f668a46d38e72fd78ad399c95b9d6fc3d6a0bf124faf5da75951271622a188c7f6ef2130fad2dba49fb783c423ded4a8fb61e658065e368d328784478a4685ba32a567820c613b390cc84d21011e0decdfd5f580e19d4ff8740726d138767125d3086f3ae1e25c9f9f436be07c9db139bfd7d72e06993ef9fd4780e94d1f3a0963e9b6aec14dc38f280a98ff98d4bb9d15f52791ffc25a7f4eda6bb77b447888a469eb3b6a0a8842963e01cbf3569a35cef580c3ca3f2b564b6d2d1c6322746bfb930c85b63b3363ecdcf4b8bf7f1efd8ff9738cfa90f1bcc5c38a5e74100076526fec59379dd5f0500c7c7068fccacaddddbe93a8220824e0e47abfe8bf151b919ba9c9cf90e4d499d36ea3284f691abb5f34561267445cc2b5057d8f720ec3110c9863971c5e844a49298fa8d10eff5e2d68bb2567616fe8aa92da83cb65f00c8535dafd91e1d063cee7f263998cf036d9431c8cca57e35cd3b8b0c9122e3fd07292a227abe955e50cbf2cd64ff6bf4137ab2a3f855fa443ec5d5b949c47d3a66cbd1e3706db70a58620c219dd8a11030d4c841c3c27a0d3ac6dd6088e3b3cca003eeb7e9c88577b047faeb79f676866dba38f0bf890d77ed83be4c1b123807c8f3ad809c3c3ae366754028fc1ca3f4699d5140af3bd4c0e8c908b6bfb6e4824ec751753ef2b4931bba8d8d48f9cae84c7249d88123ae69f79279686f62f5f8df8f8556b4eabc12f8c09e34a1006b2374f280344948b14afbc55d8b4a263a74c727035b0a929be3d39d1b3f3a7a0fed43352280e664544cdfadc1595d52e6bf421d9f310106201124ee7c1dda666adfc463f3c71e85975e359bdb855fa317368eb468bf3aca1d2c6f69d145e28d604e08f84d241854332a71c22d1de6f17ed9e7268960d1b39ff5bc7a0713a693543459cb4b36c7d941df829cdab18af97ccb66a9f48e55775347920dd7ef4166b1b02cf911088be950c6e91d5b82528b53a70d61685716888202adac8a87272fae36843bd417148bdb0e5c750a111b9db2e28fd489651de72e546978c29501788844d5c8e64e9be5e6a23ad63242d4d08310860028e981054c114a1452aed113bfe450ebcc29496a4e72e5ca87d15ce8bf25533d4ee4e780867e1a4750547c39fe3a0cfff7ad6a265ef71b79855c4041df35ec08c99c5d46695514a7b3512509ffc39a2b57225284542f58cfed080f2c20839960ffecd66bcf35951fce607cf04fcd29d3168f338097497dc641c965cfbf70178e32bfe90099d7bd0abdba2dd5e661af72d9e0d7e7b12a9eea2344c906941c87b67a2555e5e07ece01c3144959fce9609872c133d4ad21831e1969122464b8da561c8bc62048a191dcebc081bd806721c00461ad10ccc1c78365d44ca4691401551f4584cb9633706897a7eabcaee3b657154d2797f4681b47d84a79b5442947c380cf16215c97e934c1ac384b57f1cbbff1e8728e7d3a9408606ec00a1a87d8fe6c6865834eb5e725f284eeffdd29c2a57dfd20bc406f4822fd0f0a61bc4d015d7535a01fb979b2a906cd560a292ca835e14abf0caf61e88d1023b31a01df531f820b0c0e964ceff7048f097a5094761995493487b6cafaf2ab1886b66517f52d2e2121cf636ae799057c4375bd03a63a0e18233e4d79857e631a0c1494297e4fa4dbe6f8f9d6181b07feaa34e558807a7e99abec441519aa8623b8618f8a9ec958ac8c51001c8b5463fcf772726cb1277a34e0fa4bb963bff9d2b20097678eab20d6144c05893bcf960c67a0d9c3e04d8be61ec6ab18d04b1a21a06688158cabe66bc57bdf8776f23619b12a66702258cc0bb967e846b445b614378cf3645234160770f5902be61f90879d6e409ec3ac1581f44091aa2bf1370e21a0e26dfd4c0a9ae54e11aae70ab8ff8893a59216e7ab111b86c1f350e5ebdb9ed91baf2dd01f62500c1dfa753b3ce13673ff52cb1f48cb765b807b1776c96077c89fa4d2c4fe7dc9bb06d1124b47285285f07116edda994780c77fe46df645bd22aba90b6fd66c5f8d94612038cf89230cd82f55d571f65f3a2752a60623162acab77eb97f6654057a22d934e70a0214082fb95eb5588c2d239b7ee2cd1dc9ccb6e38afae3e7643579d108c3217927a7986147da688bf7bec676a4735f136012fcbd60795a72e0ccfe447a199360647b9d50e9adfe6d1a3f729d62a5905b483e15e340c63fe4922c01087922a00638d1b8f314245795c4183db658af4cf3dc2c078342f3e2f29a4d8a730213c29921cbd08498c513993232dab72cf1c05531b4ccbcec5696b7c232781daa2811912327f5cae66e1eb892f0ce46b202d5a9fdec50fbd7503788ad4ec41168a10afab76054f262494fc21e390a2a4ef4105b52890fd3f2cf8c237ab800f97a28ea3a4c50e74f53deecba95780fee7cef315c83a425eb2c4ed7e17e05f686174aaa952c917a5e2e984ec99bdcbb451dcce00091b97a1f25e68dd6795b908e8217e749613e89ba89c409fb0aa283f25787273b853b3cc2df967e4371efb89c8fbf7a5dbd94f8553ddaf8f41dcd10135e249fb618c50b28efb205abf96b408e28b6088c52bab08194684073c48c77ba6b381c72b838692081c0452da9111ec6f22746585b7c05ca638f7fc91161f8a2434e2de4398854e51044ab7e5fad11612d1e27d9065b1a3dde4522a270291abed2f0de25c9af1a5a1d1b8526298781fa2cd2925c476b2cefbe8465b87ceee06f3c5ad8181c5842c1f0ae53eaa86d4ab41159ac0fe3e52fa1ead97b9d3e017af4495f13c5d9256b967c24fd4f0aa2960963b72b1292f7a377b64c97a358d986719e8e140a0cf5311f31f396cb9356e28d576813085217aaec3612c1261ef9230f72f00d2d0684ea32c5f99b755a9737e4139057b05f92146c17b50875a2ab170a4296e39188884c760ebd414cf997efe948462fa2ca20f5c486a40b91d81d06be70f5d4d158099e3b7c774fa4a93d5e807e8db2431a5199b0fae94b3dec6f88c23a523ba66b58396544be025f9510a673bbd7ae925fd6d83d930fb1c5bed24a7406be7a6f171c3e5b031d29b4ce723194e173f617f781a32f7f74b04a3e673edaa979c66f884eef6fe2a17700060762e383fef3fae4ecdcdb860448851d822576a5d1aeddc3b0a11cf780913dd0b61f241d5bf037edcff052059add8f3fd9e8490c396128fee3f27bc8eed445f21cebee13a889cb6b61e8936881b6b5049d80318167c4659262ea9cbbc2353bdf1ef39d385c2b597eeed33e11b2b331ed6a85b3d344ecda54847e40baef96867a98322e55ec2b0f2203e77a0f5c86dc29b5dc0cb62946c15b453f1bab137b84ed69ab89d5583e3510e2c328ff857359472c30b507a5c8387f57137947792dbc2ca40b1782b5b0f93a63ad76403cb21f2da52404985b8ec6576bfec7ef98baab31fe60732a0e4acd2ac89ed3c34491ee40452c9dcdfde6ae4f61a125efc4a25a5b5d2e3102efd121eb8e1952ff616a8861ffa9a631b1e32d8238d2ed203282a8332fe45395cdabb539deed806119220266eb75f215fb81b9e707290d6d8bc10717c1d3151b9f95a8942bd3b1002ea75133d28c2749ecc0a524ad22d842bc6b5e224e51928a2d76a84ac104d476365f743d59133dfd4b22047fe9854f620e02bed38473e96bff577fd2f8fc348c5292ee60000ad0bc69f737055422186da52819330c423475c93199d80631752e6c3a997e11781e7ae28645b9fa1489219bfbcef07e1144465e5627ca93c32b2e4feecf6844af4ead6546388186dabc338289acb71d8f6d4ac7fe58e74d30846cfa2a93c938bcd168ffe0a3d6c8041a4a13e93b2c9fc6ab2a7f4100ffe8119c0f3a018ec9e31f68833d963c7a25f35e1002c100980772657ddf4342035b7565fdd2f7407a7ea3ea11103cc3d17739f19d8bcef174987f56650b13793b8a37a9821ed5006e559c7d8ee10e1ef7839bb552772ead5895b50f263ce6a4920189a9dc8a4289e148c5f764380a3a59ebddfb550774302b5c7e3098ed8210d36f3c8aea3f9e4198bbcd7f22cd275663c474c4236097840b4bef1d7845356298ede78b99245b2cb7b33dc39b3a2fc3fbc3a2ec3864a719b872aeb17aa53b04338d38253cd5cce9387632e5893239abac48d47e1ac5d669689a72043bd975693c6801e918ba5fb261942a46969188599e2769db98e77f18fc74c2922aa735f0869af104a0be6d30685d55ce51f3b8c158136258153cf72e32d5fba21d3337d19f279b349ac321efa6bc0c0ac10ba69bae022365feb77d293e"}], 0x1210}}, {{&(0x7f0000001ac0)=@nfc={0x27, 0x1, 0x1, 0x1}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b40)="266d2478305d9c869e6d6003f9ad10d59a17bd008fac023be7c0096969dd64efa9db5f3275b8c59b5bc40fed4319466c3f157809db1ba04f932c1aa76a17fd7daa16ab46b5036bd1e81eb875bb82367674f3cab2cb579773390a39eb5910bbc6294705827d7b0946c7f012e27985ff98182398d8e573cbafabfc9da9baeeb9dc9b343e949f6dab5f9ee4e1b10ba3a97d60d0adb4376a726a2f6e33117abd5e806f8f41d392bea4c8a00fc72a6160cf", 0xaf}, {&(0x7f0000001c00)="d280fe2975933c74b0edefeb9a23129f9c8c5eaf79a19b2da71a82541b3e91a8040b5f72e223a807646cb8587ae3cfb6246fd90d352956d2bf648ee8de878f5f284b4761fbac5a", 0x47}, {&(0x7f0000001c80)}, {&(0x7f0000001cc0)="8a95111e6ba6aefd4c60cd964db94beb79be616fb242137c0509dc039c7d1ea06fe69cd9bd99971f68b9c7034c6dc552caec7bd2a0adf45bb0ac6c01d3bebb52380acae3697e739af7b59f3f93e2f44fa6ffc9ebabb50b9fe860ca2cd76d3f1debc8ec21780a610da79975f1de7e5a9964a3b4898e64c64100aafffb4d3b6562fbed2097c80342f2fc48997fad7d2a2a", 0x90}, {&(0x7f0000001d80)="d3802c5b3a2b816b0b3715d0186ea0c16832c0825a90e375a395a968a5e91993ea6e8b45fc6764da3f8b262402bcd5fbeeec3870d7260ee1b0b4207c24c060e86b85c4d4e25e2bcd6652c7cb289959567e6e74fae5e65f827ccda8215963fc8a15d7d16d377bc0e75b1902b551b91f77df4047bc238dd60202cb864f21942a537e4fd30303cb9e538557a5cdad448ffb589ee5170e1e223d13d43ca5bad509aabec96356a32a29c46d9efa6fe8b7c8a4f9fbdf87e629aa0949685f2e06506e3944f3a01fa9e84c0159a16dbfa4751424411c0852913e55c0ce26847e15b80385ecb1250d9df467a2df5abbe34a433f02e7ff4629619dc5b9ed3f6682d1a110652a72e3a49186296340e9c57aa8d55a72228884982d23493ae1c7b94b468d616b73338958f6939b1c60fca6652ece311f1668ea948bc35876bdb81026bc1bdf6dd3d45f04208323ab8b6ba3d958c0f59e7c0af3703480420c7f72f67049896a060bb5d9e76514559293f78b06a1c9f33d5ea7967636d78b8812bd79d152e900f1f8dd69bc4f600287eff1b621723334c6e0dcfe4ca59ef8456e08acc10b3eec9307b811c73bb72686a9cc2db6888a8c2e1a98d6997ffafde829fc87d8f77817f0ef405dda3441f68409fe98efb89c618da5eaa19d6c0ab5e34f13ec593863d684d6832f85579b1a595d4c4525edfb55dd428649447556bb6bee4c200dad36be12a294f4a2da0e09c68dacfbb9bbdb6cf4cfa8e67e9c462568f622de1421a79e451ed79323808dee76114e06d7370f7982e37e9496ff8f098cfadf5740c9d283baad7a2e2b9436c354c4f81e7321aa3b7735d7165200691ca2590895cd1d1f9bc81ea8662e9bb6ec4e4494430fdeea4ad238cb383377488af8283d6030f0bb5cddabe9ed92dd9ab2cb1338e17c8e27e4efdd304e41e35d41b23b0f6ddbe2d21c9f4ca4b1e1aad06c5f9836d3d55b64956b027bb2f6ae9a39a35451ed871a8514a105eb060d1540e258022cb1d99216eff73136fc81670a43f94f904db984e3f0dfdd78eea5690a5d3a3af4e09a9ec75e2f22bc9b3ea479d92e2e99f100faf6a614a7a5dcec6f9e1b290ae9bc08c575dab70d821cdacb8417532eecdb02092915b0e76fc89066e9487f0a64e2828a35cbdf61262a2562d64ebc9c95cc1b8f3b946634088b318a6732e8e6b5c2a18308d56ab9f4a490c85af0b0942a7bf014321065ea197ca7d82acc5d8c1f833ea37792be51a2419352e4f0ce15fee08a9c4055be06c1232ec71264ebf5cea28fff21da7246957d795536116f84245e9e976d94b8c33d356fc40609cd1ddfe9c69bd77198aa3f15e561edddecd28fa61d5ec56ba021db62170b042dcc9adf588e500dc272499c613de5a0c8f4157bfe03c29208e7d49af34be16a9232ea06b1c0edb8aad0bcdcc493446150cc42e7b5ebd88b5b65e73384d6f6ca0082fa5b50798a8625c0ac7d3e5ce66c87442592c2b481dd66c9f86b5c501bc1082151c6dc939f6bb6ba9b890d359a1ccc9792f7be1ae560b9a26391ac81c17d2fab08e1bab917e418d7ec7d4d008845d2213506c36fd8411b78ffae967e9ed2207d5d8fe436cc8127df0dd09719eefe92c3806a34a4e542bdb096e5c6c120405a011d1cd5179915c3393c9b5823bed09e5fca4d0e6b6182dc88ed74c112af198bd668a2988049d2e5c98fd98f36d8e1a863d5b3ac07e636a08f41106db09b4e3c2181169e8507a998a36c5a0fda6095fc5509fa10494aadeb6e5b372e3fd7976cdc2df7f78c2aa682e51823dcd6a9231cce4258e193930958f7756dbd6f63b1c1e80216bc11506ef65de0992a33712f6e54d4e7e26aff9f282bacb38b549cc8c58970d66c54ca71d49700f5ecc45b5eba58b19f8061778f4b93338a2e7640f856078c72915de2438fdc5ffed050fb9aab5e44fae1b5b0bdf9bf7dc86abc9fa36fdd0af20f89e5b2f929fa1b886102b6254e693892ee60e1320f4fd660fe02377d9d2862ecbedab1221fd7c00a28986efdf797ea3864522e7cf742c7cde28af0b985158cef917436ed967c91048a6c9fca1f00e493acb35937cfe30c816860a53e358259f1507f78f5f13282a4c0958c1c511f61a03ac55c679e659089d6edc580f123ac8a0f6a241f3104d9b18476e907f0008c958ef9bf5f45234e92a0ddb2f03aad2c1f7c6b04a103368a521e5d419d9377a9331ad6bb0f183842b135379efc08342c763378c11272c70df071f464bdda056eda2ee7d259a832f441ce2eed91a55e62606d1a215f076ff81d73d890c499ee425e6ae83ea8770fe4d5c61bfb1ca6b994746c3bd67ea63dbc24512927e8946fcca691664c7cf294566ca4230bd7771545cc3159179ccd985c0bfb1acfce1094e77dd21f945485b18341cba6c81a06d851a450496a05687590c855285d11ef8cd9fcc7d38faeed44130fa35c8c1c27aee51b5f2eda39459f7b256f66f369bf9fb7fed7923d288bd6f944c400f08e396ef478394f8996a33abdb347a78c244b3f3217eb9246ad0da6c5eb609e01bf6f92980cdf61df89ee1fb2846b828615c6ee5a3305b30b94e314a43bee6d99621ea9152f3bc46f5f7b72481d11cb34f406034476c1e064306eaaf54dc8086040ead2fdfb05d569b872cc0ecbeaf14bbbd3fe40f6f3777219d4742c6781249979c6b0aa53afd9df9b89103a1746f68950f18e9cff730b64012a59c810c01aeeb1596bdb2171023ae47de7811bc703de64881696a743c0a4abcf57c7d24bf371d75a8326446015af70b48481d43c6551265e00ba06540e422a8231df4c68f8973a1ce29c62e179cdb8a808cc75125982db866040d37b4160ea881c007928a6e49092218c76d889b45d004be122dd33fee72524a759ca67cc80d86b079f3d3860113ad72ec48c217fdc2a9eaa5058006820c0542545c03899ae6cfba01ae411c1bb981fe0aab37ea8fdc766b864d07a89eb81804a50f5982b0ec40bfb1e0ad64c2617b28d53e0e5009534475b7ac4b110514177688cf5c434afdbc05fafa89ce28568ff1dbc61f818764f5fc64bc5c2c12df070e4c52a6ae8f7d4ccc26f4fe5f292841e05cf78341ed6c8384a390525d7c8b6c8450a08435ce31672284f49b59483c2eb7604c1651fac1bc7753aaadcb70ac59de2912d9ebe2680985948f03782f8e0f37426422a8ce8673f5530768fe12baae9892dc92df6bf4dff7571981e30f9f1cb2c722c92dd2d82e427fb94f875f525799f5e966dde390e838cacc8a54d04c077c8f7a2356d34f668335cc89a49509e13d3f5981cd06d203dae4eace41c90cfa56f85739b71df4ee7210f81d87a805b4f1db83cf1a734d4c0aa7d65c108c35a76f883a07e2ecf4881be43c596fb97654aca79e527930d3bfa33bb18c57180e3d98347edd44d23ce8e45cb312eb2a874c23323706d8cfc8af49ab5b85e24e0d7069f1f8a99c9636a1ce9d33b83d9f996c894c6afdc658c81bd8512426665c29bb4c34be072fcceb0253d12419471688102e26a7b347ef420482ff65f44557eba70f0916a0c3a4737baafa03e798873867df3e732a62cb642304f164a64403a97860afa30031174a6ce1a3c747782b90f87737032d13ead854ab773ef05cfd0784cbeff7445dd92bd9058c9121accac057b7e1d06e560f066d5b59b555fd566323a76b56f65d57975edb2c0a72fc0a2f01078eac6d385fafb4e614ab666680da2e7c5f641f14ea77fb5e287b063a82ee701cfc3eb6cff073a4f21fc7b26a8356f930f579b6504bdabe64a8bbc80e631d4091f447f8782ba1f6ea829dcf3e94ac8546de7a2196b546242596a2f424aa660215794b7b5a78e6f663bf4a988aaf1ab241c74acaf719ad3dc3849c452b7a6390340b80f1521d78f0fd5e6af231ada679fbf436294aace53e793f4b8207145ef9e361afc53040e14f92aff85300c0c918b4c6b1c517df4ee8c69543c222df702dd90133e8de728e6cf1d64f209fa45a5868b34d6527d5974fb85614fa610956d5addeb9d326c5e2a17d848019412aca07aa2c14793cdc72fbc062b2b368b7f4fbb6840e365252278eb5e4bdfd828b16e1d82a57da30108de234af6422b5b8d8641465b631f2b5d2b0c62aa2dfe6869a5aff972f958a0f5706dace996c57746494389a7736cd225fa5934f76fd911b5d7438e93dff166d0a1407e2a0157734599e60caad8494d40140dbfbf2b3805a41d59a5f713e684f00f2eaa018aa51f0f3b769d029c3fbdad940698500f35d29b80bd4a2d8c5d38f065d4da071562cc8e9c9bc330b1ef9034c3ed9c4c53dd01494c8ebec0b3c6b76e2bfdcd66835f2aa2d52551fc4782ddfeb2749eabbba1e4c8abc62871863a5b974e24e25ff863717c4887f0076854479ea1a4f1e4a6a425cb055dec48f7d87aa418dab716c2890898299362d468744910f77fd251906c71230559b69944f5daccf19327d3c261923839e18db577bb508752969739fc12fbd3d94541bba141b1e9ed83d674c4f9ab6de424ccff57594806ca260901496b2caa81c0f8f80c49e54812ad1adc26307b01c6502d556664ec621f038a34906a64152d5fdd4d9b26f1cdf5f6957022d466eda6ed1d906312edbf3f302a252833da8fa34acd3867a0fc6894df9154d1f567a7a4a001cab50e17575e0efeb7fafeac95e20a8265491d43f3761d58cb8e9d83626aa32375755b5426d467f177ee2d50d5c6f19afdacb91cb0dbeabe63fe72481dccec7e3886a812eba6230a9282133dd91c07cb539b12239a853599aa0418ea14693b78e89bfce78e9e43d93c47ce96992476ff7e26e568389c61d40f73bd647400966df4262b1ec09b0ef71addbda637bfc5166407f414c582d7f7e6e00ca7692eb730dfed0d9fdb00c6cbd709d7a64be886e51492252178c2d1523538d5eb7b66ea00dc5e326b5e3371f9fab44fe1ea1f49f6aaf8686cca8669f9cd60ecf7eb5773bb406dc7831cd958a1c26f8b3d0b9d9f5f16e904075e2dec1ac0eb9f7924d22cf241a53ac6f7c2c9d6012de2ab3fea3333e0bc1bdfb998dd39000f6d44467befb45aaf975d580036dc84049442a1bb109a365cfa4b63547e687c1c0e3c8c4b64f3363d6967b0b7733bcd99d10dc9db171a0a95be9877bf812a1ff44fa1da74df387d422b47e6882181ec87066137a327fb2caf526a128c6ba95c9c71706bbf7672470103e41aad3b0d8fb15785103a2807f32f82c36ce47e6ef07d4e3aeebfafcc7eb84e93b56a74bb9e8b06d7acc61bff28b768b2b8b6b7dd8d611170d0df4a5b4d88dc3518f79522e2a1aaf8f1d51c8344d138fe5df15b45bb5b47871bccadfe6d6649f0bf601da3f5e05cc0d131982f5c821fb0719fb0cc66bc1af9222f6a9fb76f320bd28436ee632c1749fbe4ca24ff8a8a83d8a5dda6fd31a9e4728f18889a45a87efebd2211c96a748371a5583d5081a064524f95a6ff586a82e88ed8a1fe4949b98b947ea490aff69ddfd7199d5bd739d2fc9049c70cc30178b26adce2cf19ad16f786bd39251ea0e484e4f645819a861ebe03e1ed108a0b68ccdbc79d718703793f797ee29889ec47375c59731f011db4bf056b9f0b02f97551fcb8618d9b416d6a90ef10f103bb2856f68a036791dce918ea031ec0b6761b41e83f049b249ef650fc8ff4255cf7ab9447dec98132f115d279cba5969f061ef8874211a970eff99a6be9762279027e46e1e31105627a0f72965804830287c5ef8862771d6a21fbb1386b87d53d6365e1a8147f32dd90abcea3d76c26391893b0e5e4a78231f6e8b74a", 0x1000}, {&(0x7f0000002d80)="4c139403bb85c28103b2730468b6f072b66260dae56199aa1704bc3eaaf058158a96761f88edef8b0250a8e677af3f9030291a6f0bc95a42969d3195c6664af5ee6e4063e69ebd9eebf867afd4bfbd489362e660739950f419f7de", 0x5b}, {&(0x7f0000002e00)="65f1a5cdac24dd76fef96bd367cdbee2faffa6c679939c5090b08868ce6b33403938dd0fc3506816c3f64c34b82cebbb0f0440a5959c362e074593d9c2723a6cf0a5c718adbe69e36bb3ee8fb083bba5eb9197cd626a0aba26ca84170bc20e865a56ed251658218e36402c335cde18dad9f371b3f13ef6ae61ca54f53079e652f78f89da348c0a888b2e851cdab16915f9e8e7ae34452b0462080f13a9a263c6b90ed0310968cc682978bb2f53da13905a33a2d42f61b1b9f329cbf371d4210bacd0ce7633917314bd1bcac8765cee7757152f84b9a58a27a55ebd0d222d1d65", 0xe0}], 0x7, &(0x7f0000002f80)=[{0x88, 0x103, 0x6, "d6736c647c9ed3e1d07b6f39024769f724d2e58928bc16d48cb9b1ead1947e4a2db49bdfbe5c27b53afd7e744743255efc4c6272aaf543a551ad39ac68ea5b655eb4fa4cfc3955c22e2d4ae5dda4632b3eea25e02ea4252a7a937bb0a1ccb297c653287c7ab02fe488860754f2b768ce2a019e3e757e"}, {0x1010, 0x10b, 0x1, "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"}, {0x80, 0x117, 0x0, "c90f34cccfd16e331190061d33884a636d6fcfb2de1d93d579805805785be81c02010426b9603eeb00df7abe66a1b3b49d0eba8d1c79bc07184f03200edab0b677d99b4d456c09ec1a9294ec01e2d4ce8ab8a3b708bdaa27c9443b2713adad0825f9ef58ef3fb82084ff58"}], 0x1118}}], 0x2, 0x81)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000852d05b0180e552e26be7effa8190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d800000100000000000000000000000000000000000000000000000030007564700000000000000000000000000000000000000000000000000000000000000000c81164ad00000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1012], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1968.481799] xt_CONNSECMARK: invalid mode: 0
23:48:32 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x4100, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100)=0x2, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000300)={0x12001, 0x44, 0x1, 'queue1\x00', 0x2})
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
dup(0xffffffffffffffff)

[ 1968.497957] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1968.518850] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:32 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x0, 0x400}}, 0x50)

[ 1968.805252] xt_CONNSECMARK: invalid mode: 0
23:48:32 executing program 4:
shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r0 = shmget(0x2, 0x3000, 0x8, &(0x7f0000cd5000/0x3000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:32 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28}, 0x28)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x58a, 0x10002)

23:48:32 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0))
socket$inet_udplite(0x2, 0x2, 0x88)

23:48:32 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1969.580417] xt_CONNSECMARK: invalid mode: 0
23:48:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:33 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r1)
sched_getaffinity(r1, 0x8, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1970.133373] xt_CONNSECMARK: invalid mode: 0
23:48:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
lsetxattr$security_ima(&(0x7f0000000140)='./bus\x00', &(0x7f0000000800)='security.ima\x00', &(0x7f0000000840)=@v1={0x2, "44d65a"}, 0x4, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000400006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r8)
r9 = getuid()
mount$bpf(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='bpf\x00', 0x40, &(0x7f0000000700)={[{@mode={'mode', 0x3d, 0x9}}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@appraise_type='appraise_type=imasig'}, {@obj_role={'obj_role', 0x3d, 'bdevvmnet1bdevtrusteduserppp1'}}, {@euid_gt={'euid>', r6}}, {@euid_eq={'euid', 0x3d, r8}}, {@euid_eq={'euid', 0x3d, r9}}, {@pcr={'pcr', 0x3d, 0x13}}]})

23:48:33 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(0xffffffffffffffff)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000000c0))
socket$inet_udplite(0x2, 0x2, 0x88)

[ 1970.322572] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:33 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmget(0x3, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1)
ioctl$KDDELIO(r2, 0x4b35, 0x7e55)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x200, 0x0, 0x4ce, 0x482, 0x1, 0x6, [], 0x0, r1, 0x0, 0x1, 0x5}, 0x40)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:34 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1970.700715] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:34 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x7ff})
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x7)
dup(0xffffffffffffffff)

[ 1970.846608] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1970.876534] xt_CONNSECMARK: invalid mode: 0
23:48:34 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1971.084577] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:34 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x800, 0xfffffffe)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:34 executing program 0:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = dup2(r2, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)

[ 1971.549894] kauditd_printk_skb: 18 callbacks suppressed
[ 1971.549904] audit: type=1804 audit(1588722514.958:11337): pid=21290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2025/bus" dev="sda1" ino=17216 res=1
23:48:35 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff})
r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0)
r4 = dup2(r2, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r5, 0x0)
read$FUSE(r0, &(0x7f0000000580), 0xefee)
write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x1b, 0x0, 0x0, 0x400}}, 0x50)

23:48:35 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x2)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{r4}, 0x2af, 0x4, 0x3})
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = fcntl$dupfd(r6, 0x0, r7)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0x1)
sendfile(r3, r5, 0x0, 0x8482)

23:48:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1971.754128] audit: type=1804 audit(1588722515.078:11338): pid=21294 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2025/bus" dev="sda1" ino=17216 res=1
23:48:35 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x8000, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000040))
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x10000000016, &(0x7f0000000200))
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
ptrace(0x10, r3)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000000c0)={{0x9, 0x2, 0x100, 0x2, '\x00', 0x5}, 0x4, 0x4, 0x4c36, r3, 0x1, 0x14f3, 'syz1\x00', &(0x7f0000000080)=['^ppp0\x00'], 0x6, [], [0x3f, 0xffff, 0x7, 0xfffa]})

23:48:35 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1971.922880] audit: type=1800 audit(1588722515.088:11339): pid=21290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17216 res=0
23:48:35 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x0, 0x0, 0x40, 0x0)

[ 1972.120332] audit: type=1800 audit(1588722515.088:11340): pid=21294 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17216 res=0
23:48:35 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f00000001c0)={0x3, 0x0, [], {0x0, @bt={0x2, 0x200, 0x0, 0x2, 0x9, 0x3, 0x4, 0x8f, 0x80000000, 0x8000, 0x101, 0x6, 0x6, 0x1, 0x1f, 0x2a, {0x1f, 0x4}, 0x40, 0x2}}})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1972.218132] xt_CONNSECMARK: invalid mode: 0
23:48:35 executing program 0:
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3}, 0x14)
getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000040)=0x10eef0f1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x1, 0x5, 0x899, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], r4}, 0x3c)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @private0, @private1={0xfc, 0x1, [], 0x1}, 0x1, 0x0, 0x0, 0x0, 0x5, 0x80000, r4})
syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmmsg$inet(r0, &(0x7f000001b740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@ip_tos_u8={{0x14}}], 0x18}}], 0x1, 0x0)

[ 1972.287194] xt_CONNSECMARK: invalid mode: 0
23:48:35 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x602, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000300)={0x1, 0x0, {0x5, 0xfffff801, 0x2002, 0x9, 0xb, 0x6, 0x1, 0x4}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x161440, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xe)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x200}}, 0x18)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000400)=""/211)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0x4, 0x0, {0xfffffffd, 0x1}, {0x0, 0x8000}, {}, {}, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20})
dup(0xffffffffffffffff)
r6 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x3, 0x101000)
setsockopt$inet_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000380))

23:48:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1972.617920] xt_CONNSECMARK: invalid mode: 0
[ 1972.631954] QAT: Invalid ioctl
[ 1972.637580] audit: type=1804 audit(1588722516.048:11341): pid=21310 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2026/bus" dev="sda1" ino=16597 res=1
23:48:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:36 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:48:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c802000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000ef0400000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000013705f8600000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000e5ffffffffffffff0000002800000000000000800000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1972.733157] xt_CONNSECMARK: invalid mode: 0
[ 1972.812414] audit: type=1804 audit(1588722516.088:11342): pid=21322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2026/bus" dev="sda1" ino=16597 res=1
23:48:36 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f00000000c0)={0x7, 'caif0\x00', {0x3}, 0x4})
getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc)

23:48:36 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_GET_NAME(0x10, &(0x7f0000000100)=""/67)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fcntl$setflags(r1, 0x2, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r3)
write$cgroup_pid(r2, &(0x7f0000000000)=r3, 0x12)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x4}})
dup(0xffffffffffffffff)

[ 1973.011432] audit: type=1804 audit(1588722516.418:11343): pid=21331 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2026/bus" dev="sda1" ino=16597 res=1
23:48:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="10da2b97d367a1c6c632a5a13579c5f590262e63eb3ecaf4844a09bfbaaaec0fded5ae3cb2806bb42d0a84fc55a53db5a05aafccef0bde21b00f2d85b7eef470954938e18d82e825261c2126ead2c04182c9081af5064d64c8a29e116a4702456f564bf0cc53840928333be1fc354f15d55307ad4f709bbd2a607e31e6f821a7c7d0fa7e11861f844fa1e20469ded40e496b073e51bcf49b8df79b9a9423e0e410f4b2adc0901c13283ce4a711a745620167a56a301eb0db04a8fc53efca54e83233e5df6208eb65053fbfc5d901ddb59c446f8fd8"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r6], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:36 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1973.012539] audit: type=1804 audit(1588722516.418:11344): pid=21328 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2026/bus" dev="sda1" ino=16597 res=1
23:48:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x0, 0x0, @private1}, 0x10)

[ 1973.202398] audit: type=1804 audit(1588722516.608:11345): pid=21397 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2027/bus" dev="sda1" ino=17171 res=1
[ 1973.280179] audit: type=1804 audit(1588722516.688:11346): pid=21404 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2027/bus" dev="sda1" ino=17171 res=1
23:48:37 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000001080)={r0, &(0x7f0000000040), 0x0}, 0x20)

[ 1973.337893] xt_CONNSECMARK: invalid mode: 0
23:48:37 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xfffffe3a}], 0x155500, 0x0)

[ 1974.042257] xt_CONNSECMARK: invalid mode: 0
23:48:37 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x0, {0x2, 0x1, 0x8, 0x2, 0xff, 0x78}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = accept4(r5, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f00000001c0)=0x80, 0x80800)
ioctl$SIOCX25SCUDMATCHLEN(r6, 0x89e7, &(0x7f0000000240)={0xf})
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1974.381400] xt_CONNSECMARK: invalid mode: 0
23:48:38 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000f1c60e7cd08d"], 0x1c}}, 0x0)

23:48:38 executing program 4:
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x18d801, 0x0)
shmget$private(0x0, 0x600000, 0x1, &(0x7f0000a00000/0x600000)=nil)
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r2 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r2, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmat(r2, &(0x7f0000ff9000/0x7000)=nil, 0x1800)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:38 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:38 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

23:48:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="b4fb5a38d254b66dfea747c85044bd1b10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:38 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x111000, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x6, 0x62, 0x7f})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="ae25e7d51320f074d7924777d97095cfd56922c456f6b8ea8804961186cd27ec84e2c54f325dee77847c8b75ff0a8d430761cdf39542ad5b39cbe8f687729ec68ec5bacc5fbc2db4950403c83ccd0eb30c7d091b2ce1158d3176a908498187713dad4d1afab8a0cb1b9aed01bfb2d1f2533c7d46fbfe7cfd1bc5f80f69f3cb71fb33aa4d9d3acebbad23b5807693519f5516d78958", @ANYRES16=r3, @ANYBLOB="11dc03990700000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20040041)
r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x135001, 0x0)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040))

[ 1975.182158] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000880))
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f00000000c0)='./bus\x00', 0x1, 0x5, &(0x7f00000007c0)=[{&(0x7f0000000600)="251fa35d86d1504292dcf97bd0145881011ab1631652487ee3f306ecd77f3cefae172603dffc2791eb01a65001290fb8606be02ce21de8086afcee6acf254144194c522dead99aaa08e9f6cbad368684e2110a4ee7d6115b80edc315691afe746bdcddade3b4e5939d341c7ee7c9c70edebe7c3f95b1157824f7d1c29d7a771859669476c0dd3199011805b03451b4b3cdf3854892db2efdf230fab1efb684115738e3a8bd343843ea90cf", 0xab, 0x5}, {&(0x7f0000000100)="969a1564ada73e0cdea7244e8532387d13b12e39b083b9b7", 0x18, 0x800}, {&(0x7f0000000140)="12702597eb8e9b1e", 0x8, 0x6}, {&(0x7f00000006c0)="8a43dd548644a5ff3e6f75a2b4e2eca09925d94a4848efab1d2bd2e8319424b1fc27ee016feea0407d18a5cdaf115bf02feda4446f35628ef338e7db455e7e9975b551f8f8a67e782de5c265c1850f9767b16d7930c9fc690074fcea0697ba37d6063e5895880b502c3aee", 0x6b}, {&(0x7f0000000740)="20464a7c12a469ef706fe2f094279f3eb3fe82fa12b4ec2b623a30ea8348c94b2f2941e007c009434c685a2d4eec08f462962d50e288da25931f4b0570b5f089e1bceba444f995900653b4329a5ec27b5e258eb8b16038be826fc4817a2dd7fd1f7127279d509abf2d85af0e98ed634839ad3ba7", 0x74, 0x6}], 0x4, &(0x7f0000000840)='),(\x00')
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1975.313732] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:39 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

[ 1975.849458] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:39 executing program 0:
r0 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

23:48:39 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
dup(0xffffffffffffffff)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r6)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x400180, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5c10}, 0xc, &(0x7f0000000140)={&(0x7f0000001040)={0x10ac, 0x36, 0x20, 0x70bd28, 0x25dfdbfe, {0xd}, [@generic="aaa7a42c5ecd232f028059b3629c2486c2b1", @nested={0x107a, 0x95, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0xfffffffffffffffe}, @generic="f666e865cd5ccb8961159d5d92803cdf3953af2600aac466cde9600b811a4e7397c6ca066cdd5a412bc696e816dd1802d01e291b368655810e3946d389459827a86e6ac45663", @typed={0x8, 0x7d, 0x0, 0x0, @uid=r6}, @generic="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", @typed={0x8, 0x6d, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x48, 0x0, 0x0, @fd=r8}, @typed={0xa, 0x48, 0x0, 0x0, @str='veth1\x00'}]}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x33}}]}, 0x10ac}, 0x1, 0x0, 0x0, 0x80}, 0x42040)

23:48:39 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:39 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:39 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000000002e9e174091f4eb4f666d06864b383c41322c0000000000000009ec603c62b6203110ae9e0a4d621889a54014024ca6c2a8467cef93cb471d2151f0e31735c85cb9076c9227c19b953ca7faf4b80a71334db71448939f8c3deb8c6030097d0636236dae0f8f1780558e6f7fbe1c9edc320b2452cc60beb455800ff4ff4c14439c1a213207b3922e48790bb41b7be9b5c45fc9910dce2ab55b55c1092886453918b6ea5c39acd702a78c24ad773a1f415281e9b653f20b2c0917f4a4ba05d4dc56fdcd2aa8a455a4dcd49ed958299a10734356c986306a1101f00f9a856055f900d3b6"], 0x4)
write(r1, &(0x7f0000000000), 0x0)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r5, r6, 0x0, 0x8482)

23:48:39 executing program 0:
syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@umask={'umask'}}]})

[ 1976.103240] xt_CONNSECMARK: invalid mode: 0
23:48:39 executing program 0:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0)
r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, 0x0, 0x0)

23:48:39 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x1ff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb}, 0xc)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb}, 0xc)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/253, 0x0)

[ 1976.389368] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:39 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
syz_init_net_socket$ax25(0x3, 0x3, 0xcc)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r2)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x101, 0x48, r2})

[ 1976.548905] IPv6: ADDRCONF(NETDEV_UP): geneve0: link is not ready
23:48:40 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1800, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000327bd7000ffdbdf250d00000008003200feffffff4301089c2e8e277b59418d5d62ef58825f51e2f52711380e14248c3a7a6ee853e4bba33510e96637f7d185e0f5663b406a8743787619f2d1242ed65d59a1a5959335de2d7b30915c09bdcb9a9e83338f6073e8c9c7d860f0cca1a036c4cd54b887a107ad9d80d0d81ae03fe81d2cb6b7eacb1c4ddc63d49ce01e87973d10575735493e4fc8b13631b4f15e4d66a64af2"], 0x1c}}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0x4}}]}, 0x38}}, 0x0)
r6 = syz_genetlink_get_family_id$tipc(0x0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4844)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1976.682393] team0: Port device geneve0 added
[ 1976.788199] xt_CONNSECMARK: invalid mode: 0
23:48:40 executing program 0:
r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xe43)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x1, 0xfffffffe, 0x5, 0x0, 0x1ff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00')
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000028000001201", 0x2e}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb}, 0xc)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb}, 0xc)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f00000002c0)=""/253, 0x0)

23:48:40 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x72)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1976.929003] xt_CONNSECMARK: invalid mode: 0
23:48:40 executing program 0:
r0 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x20)

[ 1976.991616] xt_CONNSECMARK: invalid mode: 0
23:48:40 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)

23:48:40 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1977.087030] kauditd_printk_skb: 15 callbacks suppressed
[ 1977.087040] audit: type=1800 audit(1588722520.499:11362): pid=21546 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17313 res=0
[ 1977.087175] audit: type=1804 audit(1588722520.499:11363): pid=21551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2031/bus" dev="sda1" ino=17313 res=1
23:48:40 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x4202e}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
semctl$IPC_RMID(0x0, 0x2, 0x10)
waitid(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x100000000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:48:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x14002, 0x0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100)=0x8, 0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000005c0)={0x0, 0x7ff}, &(0x7f0000000640)=0x8)
r4 = socket$inet6(0xa, 0x2, 0xffffffc0)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="29f9cc0414844db8cb8b9581dd2a2269f08249477f8674433e1cfece1ea90eaeaee07d9744f690a0199943e069f163e2969d2e91b8d8c145b0"], 0x4)
socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000140)={0x9, 0x80, 0x6, 0x2, 0x3f, 0x5, 0x9, 0x1, 0x7, 0xb0, 0x1, 0x6e, 0x2, 0x14}, 0xe)
syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0xfc5, 0x4204201de1804e70)
ioctl$KDSETMODE(r6, 0x4b3a, 0x1)
sendfile(r4, r5, 0x0, 0x8482)

[ 1977.087248] audit: type=1800 audit(1588722520.499:11364): pid=21551 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17313 res=0
23:48:41 executing program 0:
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x1004e20, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
sendto$inet(r0, &(0x7f00000004c0)="73fa46f879d827383a62aa83935b7ed5ca86204c034b000000000000000000000000fdc6a82f11037bad21eca999c7fdd66e773d", 0x34, 0x4008800, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="bf", 0x11}], 0x1)
recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1}}], 0x1, 0x0, 0x0)

[ 1977.095910] audit: type=1804 audit(1588722520.499:11365): pid=21554 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2031/bus" dev="sda1" ino=17313 res=1
23:48:41 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$FUSE_DIRENT(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="10d2d7"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1977.409778] audit: type=1804 audit(1588722520.819:11366): pid=21587 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2031/bus" dev="sda1" ino=17313 res=1
23:48:41 executing program 4:
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000de8000/0x3000)=nil)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x263, @remote, 0xff}, {0xa, 0x4e24, 0x3ff, @loopback, 0x4}, 0xfff9, [0x5, 0x7f, 0x4, 0x9, 0x7, 0x1, 0xfffffffe, 0x7]}, 0x5c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0)
r3 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmat(r3, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
syz_open_pts(r4, 0x0)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 1977.780675] audit: type=1804 audit(1588722521.189:11367): pid=21618 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2032/bus" dev="sda1" ino=17503 res=1
[ 1977.792326] audit: type=1804 audit(1588722521.199:11368): pid=21618 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2032/bus" dev="sda1" ino=17503 res=1
[ 1978.012190] audit: type=1804 audit(1588722521.419:11369): pid=21624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2033/bus" dev="sda1" ino=16914 res=1
23:48:41 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1978.015821] audit: type=1804 audit(1588722521.429:11370): pid=21624 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2033/bus" dev="sda1" ino=16914 res=1
23:48:41 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
ftruncate(r0, 0x19dc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00')

23:48:42 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/15)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x556, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1978.126292] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1978.721881] xt_CONNSECMARK: invalid mode: 0
23:48:42 executing program 0:
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002900)='ethtool\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000002980)={&(0x7f0000000180)={0x18, r0, 0xd851a549f359cb8b, 0x0, 0x0, {0x4}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)

[ 1978.776163] xt_CONNSECMARK: invalid mode: 0
23:48:42 executing program 0:
r0 = epoll_create(0x3)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001100)={0x319d2daeca5e1c67})

[ 1979.130921] audit: type=1804 audit(1588722522.539:11371): pid=21628 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2033/bus" dev="sda1" ino=16914 res=1
23:48:42 executing program 0:
r0 = gettid()
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xf1)
prctl$PR_SET_PTRACER(0x59616d61, r0)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='#selinux[/vmnet0GPL\x00', 0x0], &(0x7f0000000400)=[&(0x7f00000003c0)='[$procmd5sum(wlan1^vboxnet0\x00'])

23:48:42 executing program 0:
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x2, 0x3, 0x268, 0xd0, 0xd0, 0xd0, 0x0, 0xd0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x1d0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x6, [0x1c, 0x2b, 0x7, 0x3b, 0x25, 0x28]}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x30c)

23:48:43 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:43 executing program 0:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc008551a, 0x0)

23:48:43 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000))
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:43 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x6)
pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff)
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r2)
wait4(r2, &(0x7f0000000040), 0x8, &(0x7f0000000080))

23:48:43 executing program 0:
r0 = epoll_create(0x7)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001100))

23:48:43 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:43 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:43 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0)

23:48:43 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:43 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1980.417824] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:44 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:44 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:44 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:44 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1981.200058] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:44 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:44 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:44 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:45 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = getpid()
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r4)
rt_tgsigqueueinfo(r4, r3, 0x10000000016, &(0x7f0000000200))
ioctl$VT_DISALLOCATE(r2, 0x5608)
r5 = getpid()
ptrace(0x10, r5)
ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=r3)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x3ff})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:45 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f00000000c0)={0x485d83c5, 0x2, 0x4, 0x20000000, 0x7fffffff, {0x77359400}, {0x3, 0x1, 0x6, 0x1, 0x6, 0x0, "03a8bf4d"}, 0x9d2, 0x3, @planes=&(0x7f0000000000)={0x5a47, 0x7, @userptr=0x6, 0x8000}, 0x2, 0x0, <r6=>0xffffffffffffffff})
accept4$inet6(r6, 0x0, &(0x7f0000000140), 0xc00)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1981.879375] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:45 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:45 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:45 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:46 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1982.735706] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1982.780945] kauditd_printk_skb: 15 callbacks suppressed
[ 1982.780953] audit: type=1804 audit(1588722526.189:11387): pid=21806 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2036/bus" dev="sda1" ino=16210 res=1
[ 1982.892513] audit: type=1804 audit(1588722526.189:11388): pid=21808 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2036/bus" dev="sda1" ino=16210 res=1
[ 1983.008632] audit: type=1804 audit(1588722526.189:11389): pid=21847 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2036/bus" dev="sda1" ino=16210 res=1
23:48:46 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:46 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:46 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

23:48:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000000)={0x3f, 0x17})

[ 1983.308476] audit: type=1804 audit(1588722526.719:11390): pid=21864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2037/bus" dev="sda1" ino=16183 res=1
23:48:46 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1983.353009] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:46 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0))
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a1, 0x0)

[ 1983.446138] audit: type=1804 audit(1588722526.809:11391): pid=21864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2037/bus" dev="sda1" ino=16183 res=1
23:48:47 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:47 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:47 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x54a1, 0x0)

23:48:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x1, 0x4)

23:48:47 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x9003000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)

[ 1984.171758] ipt_rpfilter: match only valid in the 'raw' or 'mangle' tables, not 'rawJ
'.
23:48:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x6c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ctinfo={0x2c, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x15, 0x6, "030cbf955682797a744d429ecb82461711"}}}]}]}}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[ 1984.283762] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1984.355542] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1984.374963] audit: type=1804 audit(1588722527.789:11392): pid=21871 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2037/bus" dev="sda1" ino=16183 res=1
[ 1984.510436] audit: type=1804 audit(1588722527.789:11393): pid=21910 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2037/bus" dev="sda1" ino=16183 res=1
[ 1984.677446] audit: type=1804 audit(1588722527.819:11394): pid=21917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2037/bus" dev="sda1" ino=16183 res=1
23:48:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x6c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ctinfo={0x2c, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x15, 0x6, "030cbf955682797a744d429ecb82461711"}}}]}]}}]}, 0x6c}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

23:48:48 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f00000006c0)={0xf000000, 0x578, 0x8, <r7=>r2, 0x0, &(0x7f0000000680)={0x9b0950, 0x800, [], @p_u16=&(0x7f0000000640)=0x8000}})
ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f0000000700)=""/97)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x88, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @private=0xa010100}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x30}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0xfffffffd}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x6, @remote, 0xc1c2}]}, &(0x7f0000000600)=0x10)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1984.886004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
23:48:48 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1985.123940] audit: type=1804 audit(1588722528.539:11395): pid=21943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2038/bus" dev="sda1" ino=16166 res=1
23:48:48 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_genetlink_get_family_id$nbd(0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=ANY=[@ANYBLOB="2c800000", @ANYRES16=r3, @ANYBLOB="0a002b74000000000000000c000400fdffffffffffffff00"/38], 0x2c}, 0x1, 0x0, 0x0, 0xfedcdc6ca15aa55a}, 0x40000)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r3, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x303}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4599}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x401}]}, 0x70}, 0x1, 0x0, 0x0, 0x2001c000}, 0x4040)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x400c011)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1985.226445] audit: type=1804 audit(1588722528.569:11396): pid=21943 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2038/bus" dev="sda1" ino=16166 res=1
[ 1985.262417] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:48 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f00000007c0))

[ 1985.350840] xt_CONNSECMARK: invalid mode: 0
23:48:48 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff})
socket$netlink(0x10, 0x3, 0x10)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
dup(r4)

23:48:48 executing program 0:

23:48:48 executing program 0:

[ 1985.503298] xt_CONNSECMARK: invalid mode: 0
23:48:49 executing program 0:

23:48:49 executing program 0:

23:48:49 executing program 0:

23:48:49 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:49 executing program 0:

[ 1986.286311] xt_CONNSECMARK: invalid mode: 0
23:48:49 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f80000000000000000000000fffe0000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:49 executing program 0:

23:48:49 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:50 executing program 0:

[ 1986.566581] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1986.658834] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:50 executing program 5:
init_module(&(0x7f0000000000)='TPROXY\x00', 0x7, &(0x7f0000000100)='TPROXY\x00')
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:50 executing program 0:

23:48:50 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1986.804844] xt_CONNSECMARK: invalid mode: 0
23:48:50 executing program 0:

23:48:50 executing program 0:

[ 1986.842447] xt_CONNSECMARK: invalid mode: 0
23:48:50 executing program 0:

[ 1986.894939] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1986.970878] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:50 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:50 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
execveat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)='\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='CONNSECMARK\x00', &(0x7f0000000240)='veth0\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='gretap0\x00', &(0x7f0000000340)='/dev/fb0\x00', &(0x7f0000000380)='em0GPL]eth0\x00'], 0x400)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:50 executing program 0:

[ 1987.396538] xt_CONNSECMARK: invalid mode: 0
23:48:50 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:50 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = getpid()
rt_tgsigqueueinfo(r3, r3, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r3)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000100)={0x0, <r5=>0x0}, &(0x7f0000000280)=0xc)
setreuid(0x0, r5)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x3, 0x7f, {r3}, {<r6=>r5}, 0x4, 0x80})
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@dev={0xfe, 0x80, [], 0xf}, @in=@loopback, 0x4e24, 0xfffa, 0x4e22, 0xfffc, 0x2, 0x20, 0x20, 0x1c, 0x0, r6}, {0x100000001, 0x20, 0x5c, 0xfffffffffffffff7, 0x6, 0x70d, 0xe6, 0xffffffff80000001}, {0x7, 0x80, 0x5, 0x6}, 0xfb0d, 0x6e6bb1, 0x2, 0x0, 0x6}, {{@in=@local, 0x4d6, 0x2b}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x29}, 0x3507, 0x0, 0x2, 0x3, 0x3, 0x0, 0xc4}}, 0xe8)
ftruncate(r2, 0x2007fff)
r7 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="103b00"], 0x4)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r7, r8, 0x0, 0x8482)

23:48:50 executing program 0:

23:48:50 executing program 0:

23:48:51 executing program 0:

23:48:51 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:51 executing program 0:

[ 1987.507823] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:51 executing program 0:

[ 1987.552521] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:51 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_misc(r3, &(0x7f00000000c0)={'syz0', "c8ce482fe0639fc1cfebcfbb0c89bf94cc13338ec0e49160df809e1fbabcfd80c407b44ff6cc931d25563844bc8aeffed39921bf774cce2073e908cae2668a640798a9bfa8ebb63d11413adc733845c3628d8d23b532c9763042e4c8312a78dd0d9230e6d7bc9fbf823ec5f00167faa392aec250119f4b32ccd8bcfebe01a24a9c"}, 0x85)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="c7a6415deb700ecc246f47b81d273863"}})
ftruncate(r2, 0x2007fff)
r5 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r5, r6, 0x0, 0x8482)

[ 1987.703506] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1987.748786] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1988.143438] xt_CONNSECMARK: invalid mode: 0
[ 1988.189878] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:51 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:51 executing program 0:

23:48:51 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:51 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$l2tp(r2, &(0x7f0000000140)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0xa0582)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000240)=0x1)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
statx(r5, &(0x7f0000000100)='./file0\x00', 0x0, 0xbff, &(0x7f00000002c0))
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000003c0)={{0x3, 0x3, 0x20, 0x0, 0xffffffff}, 0x8, 0x71, 0x7ff})
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
openat$cgroup_int(r2, &(0x7f0000000200)='cpu.weight\x00', 0x2, 0x0)

23:48:52 executing program 0:

[ 1988.562611] xt_CONNSECMARK: invalid mode: 0
23:48:52 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f})
dup(0xffffffffffffffff)

23:48:52 executing program 0:

[ 1988.687426] xt_CONNSECMARK: invalid mode: 0
23:48:52 executing program 0:

23:48:52 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x240, 0x578, 0x0, 0x0, 0x0, 0x4, 0x0, {0xfffffe00}, {}, {}, {0x0, 0xfffffffc}, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3})
dup(0xffffffffffffffff)

23:48:52 executing program 0:

[ 1988.720306] xt_CONNSECMARK: invalid mode: 0
23:48:52 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = socket(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xffffffff, 0xb}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x68, 0x24, 0x20, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xa, 0x9}, {0x7, 0xfff2}, {0x5, 0x3}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7f}}, @qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x1}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x4000880)
dup(0xffffffffffffffff)

[ 1988.934690] xt_CONNSECMARK: invalid mode: 0
[ 1989.025313] xt_CONNSECMARK: invalid mode: 0
23:48:52 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0xa800, 0x4)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="10dadffd2d754c363af22b643dc1e636fcc078a0012824d5bc9b325d900f8db9c88e80e023ecd84a6b7405d05eb4cd378206a8d184f3946ca271bacd457670ec0bbd100653c52bb899c8c9f57d38acf28bc41a579fa02e7f2aaf2cb9d2affef5309041af98cf277112c2c512791f051a2b16c591f6188db9ec0f0495f62d3c4b15dc9b"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r5, 0x0, 0x8482)

[ 1989.069608] kauditd_printk_skb: 21 callbacks suppressed
[ 1989.069617] audit: type=1804 audit(1588722532.479:11418): pid=22098 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2043/bus" dev="sda1" ino=16089 res=1
[ 1989.073549] audit: type=1804 audit(1588722532.479:11419): pid=22103 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2043/bus" dev="sda1" ino=16089 res=1
[ 1989.335072] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:52 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:52 executing program 0:

23:48:52 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:53 executing program 0:
socketpair(0x1, 0x0, 0x6, &(0x7f0000000340))

23:48:53 executing program 0:
r0 = socket$inet(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000260007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0)

23:48:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[ 1989.936221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1990.089846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
23:48:53 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8}]}}]}, 0x3c}}, 0x0)
r4 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[ 1990.231154] audit: type=1804 audit(1588722533.639:11420): pid=22154 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2044/bus" dev="sda1" ino=16203 res=1
[ 1990.308899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1990.408772] audit: type=1804 audit(1588722533.679:11421): pid=22157 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2044/bus" dev="sda1" ino=16203 res=1
23:48:53 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:53 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
getpid()
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1990.636667] audit: type=1804 audit(1588722533.679:11422): pid=22197 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2044/bus" dev="sda1" ino=16203 res=1
23:48:54 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1, 0x3}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:48:54 executing program 0:
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = epoll_create1(0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000012ffc))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
dup3(r1, r0, 0x0)

[ 1990.792105] audit: type=1804 audit(1588722534.039:11423): pid=22198 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2044/bus" dev="sda1" ino=16203 res=1
23:48:54 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0xda077f54200cc14f, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$tmpfs(&(0x7f0000000280)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x65]}}]})
r4 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r4, 0x2007fff)
r5 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r5, r6, 0x0, 0x8482)

23:48:54 executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f0000000540)={0x0, "59e764132a5b34fd0865d3d0661692556e4b93d2eb5149694e39e6d03913b6d81fee5bf161910f12e6a4e4216892311f846cb698705b1d69794c662091b2d950fe276bc8e3ce718fbcd0bc8c78e38eacb7782c2d726882d7d800ffe962cdd4fff2dc67af7dca2b0451ef1b859179cd46cd688e38ea7edba5c454f0da5c02b759"})

[ 1990.965088] audit: type=1804 audit(1588722534.179:11424): pid=22222 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2045/bus" dev="sda1" ino=16546 res=1
[ 1991.044560] audit: type=1804 audit(1588722534.249:11425): pid=22228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2045/bus" dev="sda1" ino=16546 res=1
23:48:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x5, 0x0, &(0x7f00000007c0))

[ 1991.245195] audit: type=1800 audit(1588722534.259:11426): pid=22222 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16546 res=0
23:48:54 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
socket(0x11, 0x80002, 0x200)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x41, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfff9, 0x1, @private0, 0x3}, 0x1c)
r5 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x1, 'veth0\x00', {}, 0x7fff})
ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x2, 0x100000, 0x100000, 0x4000], 0x8, 0x8c, 0x2})
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r8, 0xc0bc5310, &(0x7f0000000600))
sendfile(r3, r6, 0x0, 0x8482)

23:48:54 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, <r1=>0x0})
ptrace$setopts(0x4206, r1, 0x0, 0x0)
ptrace(0x4207, r1)

23:48:54 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = socket(0x80000000000000a, 0x2, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="81000000eec428e6d65d88a009249d74d3816af8ef80d1a51fdd4dcdc92aabafb041de4f6ca7eec68578462512255f35a3a6", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000002c0)={<r7=>r6, @in={{0x2, 0x4e20, @empty}}, [0x100000000, 0x4, 0x7fffffff, 0x10000, 0x1, 0x1, 0x99, 0x5, 0x5, 0x88d, 0x9, 0x800, 0x5, 0x7, 0x5f0]}, &(0x7f0000000140)=0x100)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r7, 0x7, 0x54}, &(0x7f0000000200)=0xc)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0xfffffffe}, 0x8)

[ 1991.368755] audit: type=1800 audit(1588722534.259:11427): pid=22228 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16546 res=0
[ 1991.392654] ptrace attach of "/root/syz-executor.0"[6338] was attempted by "/root/syz-executor.0"[22263]
23:48:54 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:55 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1991.535020] ptrace attach of "/root/syz-executor.0"[6338] was attempted by "/root/syz-executor.0"[22266]
[ 1991.592790] xt_CONNSECMARK: invalid mode: 0
23:48:55 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x4, 0x4, 0x2001, 0x0, 0xffffffffffffffff, 0x0, [0x305f, 0x2e, 0x2e, 0x5f, 0x600005f, 0x2, 0x5f, 0x5f, 0x52, 0x5f, 0x5f, 0x5f]}, 0x40)
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, 0x0)

23:48:55 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5500000018007f5a480500b2a4a280930206000400a843096c2623692500160013140102", 0x24}], 0x1, 0x0, 0x0, 0x46020068}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x7f}, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214ff040000000000000000000000000000000000080002", 0x34)
sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[ 1992.329746] net_ratelimit: 5 callbacks suppressed
[ 1992.329752] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:55 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:56 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:56 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1)

[ 1992.613111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1992.621223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
23:48:56 executing program 0:
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f0000000200)='./bus/file0\x00', 0x0)
chdir(&(0x7f00000002c0)='./bus\x00')
mkdir(&(0x7f00000005c0)='./file1\x00', 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2)

23:48:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffdfe, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

23:48:56 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = fcntl$dupfd(r6, 0x406, r0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8)
ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x3})
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8482)

[ 1993.030178] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x803, 0x6)
r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x4982)
r2 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffcf)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@initdev, @in6=@remote}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r1, 0x0, 0x24000000)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0)
connect$inet6(r0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000008440), 0x0, 0xff00)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f00000001c0), 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
ioctl$KVM_GET_LAPIC(r3, 0x8400ae8e, &(0x7f00000008c0)={"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"})

23:48:56 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000014000180060001000a0000000800050002000000"], 0x28}, 0x1, 0xa00000000000000}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xe0, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbe8}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x89d0}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x101}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x600c0c5}, 0x44000)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:48:56 executing program 0:
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60083ff200140600fe80008d815abfbb5540f72931c7d1000000000000000000000000bb"], 0x0)

23:48:56 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$NS_GET_PARENT(r1, 0xb702, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x4}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100))
dup(0xffffffffffffffff)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80000, 0x0)
ioctl$TCSETS(r6, 0x5402, &(0x7f00000001c0)={0x100, 0x7f, 0xb2, 0xe7, 0x1, "6f77491d3948e56d1e58d620382a0a6f4ee6f2"})

23:48:56 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:56 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
setuid(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)="3f4ec62aaf7032d0bc9d1428af899733437b86e9db6d32cce0e32b7957d5c3010eb4240f73aa7790cfe7203ea9392cc3348ad8f7623e537b086b44cf73960b6bc5c9c7bd8e775bc7192badda25a3f1afb3d75130d340c3946836bd410c1a778899bcb7d019e9aee118b12f26f3f0be7882b6b57806bf2324832b66af7c46a1e6721d3a931d936bc191eb78b971acb32b0262799d2e46720da24192357be6c375cd44cdb1cd2c4d6422c1be1631106bb394ab171c2c", 0xb5}], 0x2, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0xffff8000}, 0xc)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

23:48:56 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1993.598893] xt_CONNSECMARK: invalid mode: 0
[ 1993.646789] xt_CONNSECMARK: invalid mode: 0
[ 1993.924157] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:48:57 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
modify_ldt$read(0x0, &(0x7f00000000c0)=""/66, 0x42)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="108ad9dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000140))
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="4eb57192d8f8cd477e36ab667a702aa37022212f91fe1c0eb131657b315f60dc0629557a1fc066d4c3552760e86899506c21a322d5094355475bab262473a8a1c5e808df124e516dd8616d934c250d45a75d8c461cf972b794158893049080e196d1ff670af40af49ba682726329d38254a9e2c4bebf4d027909bc29f65a424148900edb965123332e8f32192af6ccbee6ec5cb5ab73bfbd30244b0e8b", @ANYBLOB="d96592ff7a648b54d7f47deeabc009954e62092e466996906e6055002b3b476a8a90f7afee693ddb6f1480471fc795c8829524dcfb806a9a8ee739c25eb5e2d8f923f8ba0e20859daeac24bbc1ed3ecce003c5e4065f3e503667e3a2281fd84248f031d2564a36beacff954a70d934051ac9c39283623f579ffcd733b821c6b88a254e494257cf394ce716c00fd2bb1c006c72e6582d8874c66d43f853b425db242d11cfc86a735e7261946c6ed3b9d622d6ba30eeca5758ca48673c9132da403cb86cffa87325df904fba94a4deb86b942b234fa8a8e16794f648d9e6a65c3b51616c99b38fa86fce079ddd5df909e1e565"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1994.253919] kauditd_printk_skb: 9 callbacks suppressed
[ 1994.253928] audit: type=1804 audit(1588722537.670:11437): pid=22385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2049/bus" dev="sda1" ino=16719 res=1
[ 1994.408091] audit: type=1804 audit(1588722537.700:11438): pid=22385 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2049/bus" dev="sda1" ino=16719 res=1
23:48:57 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000020c0), 0x3a4, 0x0, &(0x7f0000000000)={0x77359400})

23:48:57 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:57 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:58 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000020c0), 0x3a4, 0x0, &(0x7f0000000000)={0x77359400})

23:48:58 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:58 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setuid(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)="3f4ec62aaf7032d0bc9d1428af899733437b86e9db6d32cce0e32b7957d5c3010eb4240f73aa7790cfe7203ea9392cc3348ad8f7623e537b086b44cf73960b6bc5c9c7bd8e775bc7192badda25a3f1afb3d75130d340c3946836bd410c1a778899bcb7d019e9aee118b12f26f3f0be7882b6b57806bf2324832b66af7c46a1e6721d3a931d936bc191eb78b971acb32b0262799d2e46720da24192357be6c375cd44cdb1cd2c4d6422c1be1631106bb394ab171c2c2d56b034f8ae4fb4474e641ab489467df4137c06683c6b4e3a310a753254ddeb86c4b10a39b5", 0xdb}], 0x2, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0xffff8000}, 0xc)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

23:48:59 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:48:59 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = accept4$alg(r2, 0x0, 0x0, 0x80800)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000100)=0x2c)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, {}, {}, {0x20000}, {0x7}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
dup(0xffffffffffffffff)

23:48:59 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1995.811006] audit: type=1804 audit(1588722539.220:11439): pid=22388 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2049/bus" dev="sda1" ino=16719 res=1
[ 1995.883564] xt_CONNSECMARK: invalid mode: 0
23:48:59 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x7}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setuid(0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)="3f4ec62aaf7032d0bc9d1428af899733437b86e9db6d32cce0e32b7957d5c3010eb4240f73aa7790cfe7203ea9392cc3348ad8f7623e537b086b44cf73960b6bc5c9c7bd8e775bc7192badda25a3f1afb3d75130d340c3946836bd410c1a778899bcb7d019e9aee118b12f26f3f0be7882b6b57806bf2324832b66af7c46a1e6721d3a931d936bc191eb78b971acb32b0262799d2e46720da24192357be6c375cd44cdb1cd2c4d6422c1be1631106bb394ab171c2c2d56b034f8ae4fb4474e641ab489467df4137c06683c6b4e3a310a753254ddeb86c4b10a39b5", 0xdb}], 0x2, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0xffff8000}, 0xc)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27)

23:48:59 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:00 executing program 4:
r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000e4e000/0x4000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmctl$IPC_RMID(r1, 0x0)
r2 = pkey_alloc(0x0, 0x0)
pkey_free(r2)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0xffffffffffffffff)

23:49:00 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f00000000c0)={0x4, 0x5d, 0x5, 0x0, 0x400})
sendfile(r3, r4, 0x0, 0x8482)

23:49:00 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1995.926843] xt_CONNSECMARK: invalid mode: 0
[ 1995.998420] audit: type=1804 audit(1588722539.250:11440): pid=22428 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2049/bus" dev="sda1" ino=16719 res=1
23:49:00 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r1, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1995.999125] audit: type=1804 audit(1588722539.250:11441): pid=22426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2049/bus" dev="sda1" ino=16719 res=1
23:49:00 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)

23:49:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240))
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x0, r2+10000000}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r5, 0x2007fff)
r6 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r6, r7, 0x0, 0x8482)

23:49:00 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1997.055391] audit: type=1804 audit(1588722540.470:11442): pid=22475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2050/bus" dev="sda1" ino=16627 res=1
23:49:00 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000100)=0x8)
r5 = socket(0x80000000000000a, 0x2, 0x0)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=<r7=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r7}, &(0x7f0000000240)=0x8)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x6}, {}, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 1997.064895] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1997.091131] audit: type=1804 audit(1588722540.500:11443): pid=22479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2050/bus" dev="sda1" ino=16627 res=1
[ 1997.098728] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1997.102953] audit: type=1800 audit(1588722540.520:11444): pid=22475 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16627 res=0
[ 1997.106018] audit: type=1800 audit(1588722540.520:11445): pid=22479 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16627 res=0
[ 1997.615396] audit: type=1804 audit(1588722541.030:11446): pid=22501 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2051/bus" dev="sda1" ino=16627 res=1
[ 1997.648446] xt_CONNSECMARK: invalid mode: 0
23:49:01 executing program 0:

[ 1997.691816] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:01 executing program 0:

23:49:01 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:01 executing program 0:

[ 1998.034088] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1)
r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x501a40, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000140)=0x8000000000)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="000041ab1934ba7c3d88659b70fcb0dbe86e450b2cc1fd5b5619405c71088c94699228bb12d58f76afe1adbcd54b635ee8fefdc582d611f5cbecf304babe95e9a5430f0f7da5bcbb5630427ff7c85cf58441a2f6e4efca792ec151059acfc9ed443077908f74b0085dc842c0c2261843674f8fa40b544635ba5d655c99956a214ff96a68b131b9c206c28f6f059813da901bd494243a972cd285419f07ea1ffa27bb1271ed66614fffef35a5"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1, {0x0, 0x7f, 0xb14e, 0x6}})
sendfile(r3, r5, 0x0, 0x8482)

23:49:01 executing program 0:

23:49:01 executing program 0:

[ 1998.256681] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:01 executing program 0:

23:49:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x80013e1442, 0x180)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:01 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:01 executing program 0:

[ 1998.560449] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:02 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100))
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
syncfs(r6)
dup(0xffffffffffffffff)

23:49:02 executing program 0:

23:49:02 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:02 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x2)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="22bd892b08d0bd00b4aae5674e1cf56ec08e71f8a14cd04627c44dac165557510000000000000000000000ecaa57f97f7344aa7c340a2f7e4a80ec4f3d2365deaec088b360200060377cca2fbbdad0a1aaf0850c7633e2791e946a37091ca8080b932416038a95bcdae11890212e05a3c81329de535f7c314c1c871ec92a30e23f31844c7e0000000000"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fadvise64(r6, 0xfff, 0x4, 0x3)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 1999.301815] xt_CONNSECMARK: invalid mode: 0
[ 1999.321862] kauditd_printk_skb: 5 callbacks suppressed
[ 1999.321872] audit: type=1804 audit(1588722542.730:11452): pid=22564 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2054/bus" dev="sda1" ino=16331 res=1
23:49:02 executing program 0:

23:49:02 executing program 5:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
connect$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1, 0x4}, 0x10)
ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000000))
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000001c0)=[0x7f, 0x6])
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = dup3(r5, r2, 0x0)
getsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000300)=""/121, &(0x7f0000000140)=0x79)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xe1b2)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x3}, {}, {0xfffffffd, 0xffffffff}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400})
dup(0xffffffffffffffff)

23:49:03 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:03 executing program 0:

[ 1999.427981] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1999.479600] audit: type=1804 audit(1588722542.780:11453): pid=22564 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2054/bus" dev="sda1" ino=16331 res=1
23:49:03 executing program 0:

23:49:03 executing program 0:

23:49:03 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 1999.853969] xt_CONNSECMARK: invalid mode: 0
23:49:03 executing program 0:

23:49:03 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(0x0, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:03 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:03 executing program 0:

[ 2000.427518] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2000.465663] audit: type=1804 audit(1588722543.880:11454): pid=22572 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2054/bus" dev="sda1" ino=16331 res=1
[ 2000.569741] audit: type=1804 audit(1588722543.900:11455): pid=22618 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2054/bus" dev="sda1" ino=16331 res=1
[ 2000.630846] xt_CONNSECMARK: invalid mode: 0
[ 2000.662906] audit: type=1804 audit(1588722543.900:11456): pid=22613 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2054/bus" dev="sda1" ino=16331 res=1
23:49:04 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:04 executing program 0:

23:49:04 executing program 0:

23:49:04 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:04 executing program 0:

23:49:04 executing program 5:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x6)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000)
r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x2, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x5})
dup(0xffffffffffffffff)

23:49:04 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:04 executing program 0:

[ 2001.224107] xt_CONNSECMARK: invalid mode: 0
23:49:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="230868332d211f00"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_S_AUDIO(r6, 0x40345622, &(0x7f0000000100)={0x8, "3ff04e99fcc7fbae3f8315c047408517c5d8f563710791ed70f66a7200c36aa1", 0xe37317a30b8e2ce5})
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VHOST_GET_VRING_ENDIAN(r7, 0x4008af14, &(0x7f0000000000)={0x2, 0x80000001})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x2c, 0x0, 0x703, 0x0, 0x0, {0x4}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140), 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdfd8250400000018000180140002007665740600"/39], 0x2c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x2000c000)

23:49:04 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:04 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2001.573551] audit: type=1804 audit(1588722544.990:11457): pid=22676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2055/bus" dev="sda1" ino=16349 res=1
23:49:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2001.594637] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2001.596814] audit: type=1804 audit(1588722545.010:11458): pid=22676 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2055/bus" dev="sda1" ino=16349 res=1
[ 2002.019350] xt_CONNSECMARK: invalid mode: 0
23:49:05 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, 0x0, 0x0)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:05 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2002.548865] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2002.817265] audit: type=1804 audit(1588722546.230:11459): pid=22678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2055/bus" dev="sda1" ino=16349 res=1
23:49:06 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:06 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:06 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = accept$unix(r3, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e)
shutdown(r4, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000001c0)=""/40, &(0x7f0000000240)=0x28)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 2003.029354] xt_CONNSECMARK: invalid mode: 0
23:49:06 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2003.729938] audit: type=1804 audit(1588722547.140:11460): pid=22683 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2055/bus" dev="sda1" ino=16349 res=1
23:49:07 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2003.883469] audit: type=1804 audit(1588722547.140:11461): pid=22718 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2055/bus" dev="sda1" ino=16349 res=1
23:49:07 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:07 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
prctl$PR_SET_FPEMU(0xa, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:urandom_device_t:s0\x00', 0x26, 0x1)
dup(0xffffffffffffffff)

23:49:07 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fremovexattr(r6, &(0x7f00000000c0)=@known='security.apparmor\x00')
ioctl$SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000000))
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000100)=0x25b, &(0x7f0000000140)=0x2)

23:49:07 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2004.569485] xt_CONNSECMARK: invalid mode: 0
[ 2004.583392] kauditd_printk_skb: 1 callbacks suppressed
[ 2004.583400] audit: type=1804 audit(1588722548.000:11463): pid=22780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2056/bus" dev="sda1" ino=16331 res=1
23:49:08 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2004.907599] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:08 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:08 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$caif_seqpacket(0x25, 0x5, 0x2)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', {}, 0x80})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x800, 0x0)
ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f0000000240)={0x4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {}]})

[ 2004.941426] audit: type=1804 audit(1588722548.000:11464): pid=22780 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2056/bus" dev="sda1" ino=16331 res=1
[ 2005.312429] xt_CONNSECMARK: invalid mode: 0
23:49:08 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, 0x0, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:09 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:09 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r1, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:09 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2005.764504] audit: type=1804 audit(1588722549.181:11465): pid=22785 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2056/bus" dev="sda1" ino=16331 res=1
[ 2006.280779] audit: type=1804 audit(1588722549.691:11466): pid=22789 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2056/bus" dev="sda1" ino=16331 res=1
23:49:10 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x10)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0xe9c9)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x28)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x100)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = creat(&(0x7f0000000140)='./bus/file0\x00', 0x192)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$FUSE_DIRENT(r2, &(0x7f0000000300)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="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", @ANYRESHEX=r7, @ANYRESDEC=r0, @ANYRES64=r8, @ANYRESOCT=r8, @ANYRESOCT], 0x4)
r9 = socket$inet6(0xa, 0x1, 0xccd)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000001000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000500000000000000000000a800d00000000000000000000000000000000000000000000000000028004e03000000554500000000008700000000200000000000000000000000020000060000000000fe800000000000000900000000000000fe000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000b78c376c8628ef0e00d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff69ae2b94d53a422242942820d9a6db53c300a0422f005f17371773a9579bcb0f4a4df46f9dca21d59a86c4003eada20ec5338373de0fc17db7d924fcf7aef0715d8a7efabff564e1f976f7ebe747805db8425dd3a535e73072f38ddaafe4397a95513083776eb24d855c6e35a64a42f35239f7dd8da32706631338d19acdd90b74ac4cd442d2efd8729c5fb3c8547aff280d0ec5cb997feb5feec8f9a6d2977d1ef8b25838ba4b620e5d93dfbca222dbde5609abbcc086e0771ccfb9d15ea75f03f028f27a35fc14a836f32018199d14baf69010e8bc00d240f4d8eeee9f8e34830d26c70f0f1b2a4bb38e96178ba1f6d63ee474ab489eb74eea1354d1975e35150c28406084529327a457311c1e8af18d2b0f0681eec9d652d035491aa0a51bb6faef2d67fbb4d7e18d6bb4a5ff44eab2a905e2ea4009fd0e4e549707e1dab30918c8f744e29b26e4d31577a23105e3cfba0916b1af2fc67b5a9fe827a82ead61d93bc47b812a825d6d950c015d56c33124d2f6b02fb6c0bff9479d0edf6caedaa7ecda284c804307038548"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 2006.281164] audit: type=1804 audit(1588722549.691:11467): pid=22824 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2056/bus" dev="sda1" ino=16331 res=1
[ 2007.136504] audit: type=1804 audit(1588722550.541:11468): pid=22864 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2057/bus" dev="sda1" ino=16109 res=1
23:49:11 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:11 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:11 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
getsockopt$inet_dccp_buf(r2, 0x21, 0xc, &(0x7f0000001640)=""/4096, &(0x7f0000000000)=0x1000)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './bus', [{0x20, '\xdewlan0'}, {}], 0xa, "f7bfb9613c3c7b7df0611fbde718c498c1404d218785c02ab5415a1eecd80c44ae5f37ea0181267b0a8778698c86c47a1f27927606704d883eb8fb84befb82310c29f255b5b12b14aa2e47ae2b210882e8117185370e5e0b6a60b58d4de28ca814ec56477769fd110d135e23cea598702bfe40244a02b528aec413c558fb8f303d87398ff2f7b8cb27b8fd6c1d24272aa77091f6d7ea894d685704fd2e2af9f193ab6e8cca6e982868eb7d336d2e107d293a9599924c50401c487b5f4f433227b5564d50e55984466f0887234c6d1f686d09c5c66cd0ea9c333019a6bf1d3092311dccb6b20fd0cea8b920f86e2bf34de436c0dc92ac80b8749d1755cc68cc3f62769001ef7361399eec87a05e98bba4187a38ec3d37da9a4e786761db872411e40f9f4815766e4e02b8cbb25aab8eac33de76ccd8e308179c38dc05bd1892d758e6918abc9fc92f97faf08fae144ba85a30ea30f3921be50a818ec7ced031b5e55ff70128278b36e3e6149dfadf0e7758d63ed5efb055f17adaeefdd261ab467cbaf6d78a847b997102a2b50e472a7742aca2dfd3b7006dc428339ca2ec7a8b851f0854ff8246e7670d6d2ad4ccc7d5bb8423e2710152f7ee413b55ef6d99f1335cf86c3fb47a268b0b4ea6b836661abb2a934a198419428f05431ddfc16f90b57a2e064ad74e75dd671e3aa2a2628769b506619bd05ff3549744b3e30780186cdb98074a030fbf1d223c2bc078c383a4a4b4bcd8d40a2efc46b6ca3e6a982f5dde89b213a74538be4309cfd1adbffa408de2426a09773b945e78b4d65b2fc15cb80cea4c8d2e58afaefd414db4fef2f8b7cd79ad9a2d390153fc74ca9bac43671492266c6e0f0b472a3e75e09269f3f532807f86e85240783e0401760724bcd68fc14056152c6079f2437b8397dbcb6d0e30fc48d70db9516d8660b1907837a035025890ffccab9c0bd65fbeab6f629cf6a43f625d8db0471c9bbb0d6074dbc212cc9b4b6e13600a4c650afa88ddc5ef7480436ef4dd29eb9fd1a6a14767a3a2f5b98641d14f40fa8d72604106ec1700467105f1d424b6cde2654c659b93f533d841d0d033f8c8dfd2cbb2e1f484a95202742b549b442b0898818c6ff39f79d9f1f49a165d1b7936836902375dd2063922a4f683fe447868d8eac8ed0140f0180d4495523ad71ff5b557e6e0c9a813f71c949e96cd45a3f5c703caaa19f3606988b8bced0ed4cb2589f45b0d853fc5bea001cf5e46095e84af8b1afc05a44e02947b96f5f53654f943f05fac04b3579a4d5b99235e2dc89955f80093166e34b1ff99ec9b1207a4b442fc3474fd38d3678b66f6eaabe5d62d2ad3a52fef6055c294f8cc66ed9471975cba969b1bd8ccb200e7bb4ba1608d3af94a386ca6ce597fe64c0ac7e98e4e2b8d55dfedcbbfaa5044d48d3d423f14682e2a144dbb927136089a718738bc8bc43b0d39192c714e7a56bbb3d1232be70a1a27bb1f7be5b8064a6eb4dfcec1cf37563e39c3d50d5aa36c3b0d1e2f9fab7f7aa049c4a7ed88816729efcdd17422e086128c6b4f88aaa61e6fdf66b22d2cb73a683aee61e114ef9024dea2a68c63c532f3c4426d9c98041d459191f73dd011dc5332c5a5b49da348531577a47fc7a18d7e5cc8bcffe5dbe5d6e5a06d30cbb271f8c6badcc50f10a737a82652b7dd77979645b5920866eb7f784787c84c09f8b1b6c7cf2140a0e8f9b2d264fab72c006ba0b43898e3558743137fb5b92e0daf9b5e319dbfd8ae5c73413ed17702d9807e74cdcf47723c68b0e294e2d4a3dfbbb2ee0670660260df529d648c09eedb203e8de8c0bd1e2e68db47fdce15e804a85ff61a9a8d07336146f10622e48336346f242243fd40d52c868edda9bcf7ad6f08fcdf812a78af4f5df37ddf6e6f9a38f1dae24fb0beeecef36c1ac4f187410546d37828fe45bb83e7ee3f135f7a0cfe83ec492e730b341764bb7879e7d295fb46bf62b7e2e77689f9b75beead7173537adf8b9098acedc0483ed614bc1de79f8c566c5e08ac17f3207a281f788d26800958d99063f0bd2ca446ce756cf5ada57a61415fa8f272efa43c66565b937292ec0cc34c0fe6ff41eac910196e583cdb8c859db9dce7e5e902da0874ec0d27519ffb0a35511773fcb70d649dff409b2e797e07e43e7c243b019d7da6e9795722b8e76203a83a6aeb4549871071e01b05f3e4bcd82012e1c261a7aeeb6386806162f59135735aba3448023da88272be2f7ea790c91256c0bb789055c7370b233ac4e8eaab41d4c9f424ea30c01e82d7c86206279ee122f5f76964f452817c4b7c1280eca49a4dbf123e9bbf623e468426263e0cc4132b117f85189b463bb609eb3a808237c53d8ae3c507d68a8e58f0eef4c4a4337d202e55e9370ba788defe6eb218c1bbe6b352366200e0da4ca44560e844463a7177df4d5083e97402cfbbe0983ea4aefc40f78f3436cd5d932ca54ee61fd16901ad894794ff41b49836fac95ae94e59b9c1c2cbc0e87a76a5b7c0984966b6e7fb61271a336033b754ddb832c5bf339aeca468a3b4482545f2f37108d87fb684444923649d18ad81c89ee087a6a71c55bb769924d6e05d671970361cbf9393510e21b62e7587d4b5ab5cf23ca34c77d83b4fbf719d0d722a6a17c7d529ca5851aea1b41c91897739aefaa216554bc6e4bc108bd03f6633093b8525ab732c1a7aaccdae060445bda4e5747af44b48820905e858970d63c1583ee92612e81a02acb0748de7d642e644f92890e1c8d61355f16cee21c204fcfc2ecae344412a41bf00a2363a24a1133f5559a3c84d3272ba45a68e4309c9fdd04697cb029ffbf6869672caf14790247ace077f202e72af6916ef6dd1856a13fdd280d58620c6475606d1b4e345e907f203cb38caf023f619d7b98dcc6001d6a0ad02823294061edc8c5e940cdf1a9e81d964855e159ccbc66a438a0d2eae321bda057a6c0d4361f83ca1609cfede55497540c1d617c9c9e568811d6e3bda24d3f6468b6bbaab30b5555f8ac00e1bb35ca4c2397fbc8cce018b188dfa65189ae81ac90096fa1223e7f69ed3ed78ee519690bbe687a104628dd46601f70841ed4017a3a4f89cdb129560c6a4d128632af8636123eafbd3c543817968b1d2060304c6d0f0f3e7f075f578e7645885b6567d797a46f5c42ecfdb0cc0b574d5e4035286da7fc90759f685e65725145ba4103987508306822232bbc320568ff81d1ab2d3bef574e4d2a52d8a4444560991119cdcd0ee889fe1822e0a580716e326c45497482c200e375d6890b707de4f4975d87068e21a7138b51a1d84eec943ad7732ad7eb36b7de606cd73f38b1f0c6f63cb51d4ced5565b9d1abaff6c20857955fa0135d80b3ccdb1c5468f9b51ce6f9179b1ae79502bee451d5abd033e093361a64f16cb12fe7310124bae7c2b12129a6287fa51a63e1668df5d90c2a9cdd5566a07c6d7a51b345670af8a94777edcf7989d09df474513b44de41f3741de9b8d950f2a374db5532473e53595fa3a4940b1fe69e7453eadd5310603b7a3beb9c092029e25b922dfa87ba9bbc6b9ba9388e9c701ceca128a63fc6e3eee33771dfc4e22ad626c2084cfe33051082cd2de6113db639fbe4bf72797997966065a058e4066bf1430b3e0a183d140932bb8f66619ad3a11795380f1a30e1ffa10a84d19bc703c6a811668be4b8de8753559682846392d9ee1dd2c501cbce0c51189206d354b275bef9c9db2a3eb6fe2b20a8c6c58c63900c92e32e6887ed35bfc52a5103f7b33e00d5749cbd27beecae259a8b43a0bd574e0afca3a7a56d6bbaada452e756801675ee99f0fa581bd2dc188221fcbabc89def6fe41abef1cdf9d051a3b0eddf28759af375c909ad6ee0455d91f7325849aaf3d98355b08c732ffb13d4325a7bfeffe1586194ccd0d9f02f910f4f504ee926c6be846c7ce1abb2cffba7d49f8c6bfa6ba6241fc3c2130f1796a2155fb046975d40e5c8505d9902da33d5e228e4cb5687aec0ed9f7efdd1ecbdb18308bbacb5d85e82bcae4486b5680fbb48edf32d0319d34a06d7fb343456b4b886a10cf442eda34923826ce3776d53731bfb042fa182b48359da610137cfa29bbc490539b0fad01ecbbcfbf286c5d9cee103a1f35a0e008c9b773f85b2ab46c87d80a85e4e52460c64e9566ab80d90d1da62b9bf40f1c7b597ad6ee1f5c81a3d10804936d6bdb986b9caa4eedeb23bdd1d210183d4d9bd20a9604e8d1ec840e31c619b5978a189399223c7b0ade979be384748245ba967e996a05f099e420ead37b955cca53df8c041f25d9283be05e77a5617258f41fb14f51c07762230abf24071a96cb33f7f5b7203e3f954edb22437258ae7934cb16459ad86f2933d237487e191cb11943484f2f3a336a18fa57d4386a7e066d8b706fd65690b406ffc98a40feec2f815a336467516ea67ac73b007a94e6f606272722c54d374104a4bb587f65fa4edec7adb1af353c70891d431dc2209196963db72a29dfc8e1d3ebc40e88e3db26cad8ef230a9973a955af86084eebc12df64ba0458f1d1cca01275b817148f58a11e1e18d2548e33f37fe887725ba8a526725b6b2aa53987a0e83fa736e45a014d020ca3a92734aa89716d502398947c67d0ea550b0e12919307912ef8431cbc050a73a163ec761ab479873d239fbabd2b8fdd0866c2af8a540be125b3251fb415fe2615d3e6ea004774d35cdf20991f07a6b448651f72c33fb17faa568f6f35db6cd00615e621b6eea61256cf02e091ad69f6c950c2cd9465329ff4ce916fcda7255c2482df101bda3b17d037317be82e9e3ac2fa08882501fe4e8910b7efe5cda0483bc389edd64f431f2edd6cc1b52b9cac687b99f125b3c543583997cfbff2c8e69720e623b2f72dfa042ddcbc41cb40f895ca2bdecc914a137f0191e2ff0083adde87c4d54939f38690b41c4330da55a178f33355c603961ba5d07895599ff69127272597c04d7ab721aad7d7b50f4e8fa71be9ade655cf39ead0cbf6e3ceaddc4f3e6278ca9f24d86c90b2035daeccc00b4fd2ce6be3ceb697bd6cd6917be51596d20bb08e3d8fe9ff46b4a9f38ed21fcf76217309c88758f0bd7b7a12c090e0476b2cd020adb870b7f19fb4cade425566a674efbff8fc54490f24cf85cea52a38bbad5550526b1a1a4be5b7fe0fa33a51418a56334c862d5842e19d2e27adfaacc6dd02dd13b32386af9b9f82327e05a2e9497c811373b8a6106f37d24a60209e5b1ecf92b4584386dee0783697aacee3fd89f16322f4c59e141c9eb4576f773e0ae015457805fb1a284f00426272f6d9325a39e59485a80d8613c1301d5531bb6b47fb5e58d7c7f7c8da92ffbd7a6933c424b4b5fe09ba9fb0e88a44639e40bf51b32442414e30bed98dddd64788b23541102e19dc15ddef801f0aa47bcce5925fdd06c1ebcc5529f36612fc04d6503f3c0c9251777d371fe3a1b5f7f59a76c8f7aacbfd7b36d77b8852f7e2e2abe5eb557dbe64273ee668fb0d5bb9d551e3b9521d8ea338803977e9cae2fb14abad90fa6b38a95b3490cd406a9accfd35b90d382c8b9da71fe20d79dc01a4d5dcf65fcc39a0418f925d7a161ed07aef03851a880aff6a2825c987a9f000e43c4129706028b234c5544d11184ead205cf3ce51c30da5cb9f39c5fdd08f04cd539132714793051644c78f0bd21835cde3aaaeb96320308929b3b4867948c9edccc9bdac545c6caf239b30008f979984c7a3128919e7d7ace2f80ee87b6c2a56845b340aea2f7fb68c"}, 0x1011)

23:49:11 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000})
dup(0xffffffffffffffff)

23:49:11 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2007.905158] xt_CONNSECMARK: invalid mode: 0
[ 2007.957937] audit: type=1804 audit(1588722551.371:11469): pid=22873 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2058/bus" dev="sda1" ino=16708 res=1
[ 2007.989010] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:11 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2008.194009] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2008.241796] audit: type=1804 audit(1588722551.551:11470): pid=22891 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2058/bus" dev="sda1" ino=16708 res=1
23:49:11 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x460401)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4})
clock_gettime(0x0, &(0x7f0000000100)={<r4=>0x0, <r5=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000001c0)={0x8, 0xc, 0x4, 0x20000000, 0x7fff, {r4, r5/1000+10000}, {0x2, 0x0, 0x0, 0xd, 0x5, 0x3, "ce75f273"}, 0x4, 0x1, @offset=0x9, 0xbef0, 0x0, <r6=>r3})
ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000140)=0x3)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCDELDLCI(r7, 0x8981, &(0x7f0000000240)={'veth1\x00', 0x1cd})
dup(0xffffffffffffffff)

[ 2008.355775] audit: type=1800 audit(1588722551.631:11471): pid=22889 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16708 res=0
23:49:12 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xe336}, &(0x7f00000000c0)=0x8)
ftruncate(r3, 0x2007fff)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x4f5)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000200", @ANYRES32, @ANYBLOB="9112a079d906c300ea67325fc316c6f127d4ad4fd15fd93fd4bae3b03e19482a8124a17a15f990406df746e1e6d37dc4fde5a03dbaabc6317f3da62ef2e647604bebd1003c4edffa25c5e66da8d90a4760998a01c888bbb1798352d50b32d17392d309107306569cddd516f7336b707ee5e7443db114b48fbef479f25e9d6e89218545d563e62c3dfcbebd61c9a6e03d767dc229229a816b01ad791355ad8324b347f3c8fe6f9a66ccc4b2fc06c7bbe3197d902469847db8b6c86d72e8d73a8e998d85d049282e", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310200626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

23:49:12 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2008.652179] xt_CONNSECMARK: invalid mode: 0
23:49:12 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:12 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2008.691760] audit: type=1800 audit(1588722551.631:11472): pid=22891 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16708 res=0
[ 2008.985141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
23:49:12 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 2009.044415] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2009.547005] xt_CONNSECMARK: invalid mode: 0
[ 2009.611754] audit: type=1804 audit(1588722553.021:11473): pid=22921 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2059/bus" dev="sda1" ino=16889 res=1
[ 2009.612736] audit: type=1804 audit(1588722553.031:11474): pid=22927 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2059/bus" dev="sda1" ino=16889 res=1
[ 2009.612808] audit: type=1804 audit(1588722553.031:11475): pid=22931 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2059/bus" dev="sda1" ino=16889 res=1
[ 2009.613928] audit: type=1804 audit(1588722553.031:11476): pid=22932 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2059/bus" dev="sda1" ino=16889 res=1
23:49:14 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:14 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0xb3)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xffffffff, 0xb}}, @TCA_RED_STAB={0x104, 0x2, "5063b0be957b67331ff74ec1305f78c096c9127335b5cc25fed4c04d2dfbba06d52f9dbad15412dd2618850c3a3249bc8372fa4c3d7158ad8b4bf5edb9a85a6edea223b47da512f7e85a2fc864e1e693991fcd83bf662a8d12007bcba7d9fde1f1fc20df6afe029b7ac65f67bd6db8ce6a27b682401184cc4fc8899427e8703e74ef267bbcad8d962700aafb02f5284993586b1f0dfe36a7300ec2e5e8fa1405d72ec12870ff00c00a3f20616577505cd98b310515607e7d034c2a78ed5864ad1229bd55f778e796148c588c2c0c147b625f9a2ea5246f0f02adf3cf0be06db014b393d9e415f34399e2c00d6ebc50f4cd22fd16faa1582067333fbcdcd9715c"}]}}]}, 0x148}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', <r7=>r6})
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, r7}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
socket$rds(0x15, 0x5, 0x0)
dup(0xffffffffffffffff)

23:49:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000))
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:14 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x0, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:14 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
writev(r0, &(0x7f0000001fc0)=[{&(0x7f0000000600)="dbae08ef93a4c5761008b5743ca98cec2d617b50f9ff2799", 0x18}, {&(0x7f0000000c80)='j', 0x1}], 0x2)
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)
r3 = pkey_alloc(0x0, 0x0)
pkey_free(r3)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, r3)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0xa30000, 0x1, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x99096d, 0xfffffffa, [], @p_u16=&(0x7f0000000080)=0x3}})

[ 2010.886078] audit: type=1804 audit(1588722554.301:11477): pid=22971 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2060/bus" dev="sda1" ino=16575 res=1
[ 2010.898443] input: syz1 as /devices/virtual/input/input215
[ 2010.918445] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2011.106321] ptrace attach of "/root/syz-executor.0"[22987] was attempted by "/root/syz-executor.0"[22988]
23:49:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3e)

23:49:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3e)

23:49:14 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
tkill(r0, 0x3e)

23:49:14 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x0, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:14 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$cgroup_type(r8, &(0x7f0000000200)='threaded\x00', 0x3bc1ce8)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40d4)
sendfile(r3, r4, 0x0, 0x8482)

[ 2011.230487] audit: type=1804 audit(1588722554.621:11478): pid=22996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2060/bus" dev="sda1" ino=16575 res=1
23:49:15 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2011.263105] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2011.266979] audit: type=1800 audit(1588722554.681:11479): pid=22986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16575 res=0
[ 2011.267528] audit: type=1800 audit(1588722554.681:11480): pid=22996 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=16575 res=0
23:49:15 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x0, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:15 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2011.590214] audit: type=1804 audit(1588722554.961:11481): pid=23014 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2061/bus" dev="sda1" ino=16845 res=1
[ 2011.597183] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2011.601614] audit: type=1804 audit(1588722555.011:11482): pid=23014 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2061/bus" dev="sda1" ino=16845 res=1
[ 2011.712885] input: syz1 as /devices/virtual/input/input216
23:49:15 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0x0, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:15 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x800000}, {0x0, 0x6}, 0x0, 0x0, 0x0, 0x20, 0x0, 0x7})
dup(0xffffffffffffffff)

[ 2012.250546] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2012.344479] xt_CONNSECMARK: invalid mode: 0
23:49:15 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ftruncate(r3, 0x2008000)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0)
fchdir(r6)
r7 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

[ 2012.375208] xt_CONNSECMARK: invalid mode: 0
23:49:16 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd28, 0x25dfdbfb, {0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4004805)
ioctl$RTC_UIE_OFF(r1, 0x7004)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:16 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0x0, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:16 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:16 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0xd6, 0xd32f}}, 0x28)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000100))
dup(0xffffffffffffffff)
socketpair(0x23, 0x1, 0xfffffbfe, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x80000000000000a, 0x2, 0x0)
close(r5)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000000c0)={r7, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r7, 0x80000000}, &(0x7f0000000200)=0x8)
r8 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x4, 0x8600)
sendmmsg$inet(r8, &(0x7f0000000500)=[{{&(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)="2e0c9c776cc2c108a447d2ddcdfa443d587b21b8c73a490b2e88c27a8cf7d505cf52080fbdfb5aefd5", 0x29}, {&(0x7f0000000340)}], 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x120}}], 0x1, 0x20000000)

[ 2012.761509] xt_CONNSECMARK: invalid mode: 0
23:49:16 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = socket$caif_seqpacket(0x25, 0x5, 0x1)
dup(r5)

23:49:16 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0x0, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2013.103627] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2013.176832] xt_CONNSECMARK: invalid mode: 0
[ 2013.228632] xt_CONNSECMARK: invalid mode: 0
23:49:18 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:18 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x0, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:18 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40200, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000000c0)="dab8a0a42ab6d01c6cf272b3cc9f5192568b59711252e5f939681b0bff5dbcdc44b6a6f7f86ab5ad39acedbd7b5839398d9638ef056bbf65a8fb8260a57775be5958cec9f0d14260e34c86e2d6739a67dc1d263074bb869438a546947845d2615a106348bea6a5aba095f4de145d73e6f79c63f7e4a8d31ac58812da8cad77e9c6a5fe76a81509e35fdc71171c1b173993f72dcb2f7ac31b0f317b724533e52d80c3d043f0bcd8ba1329e983ea31016fb1eb03b05e4495b2ceeb3e6a", 0xbc)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x5, 0x0, 0x556, {0x4f80, 0x4}, 0x1})
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:18 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10800, 0x0)
accept4$alg(r3, 0x0, 0x0, 0x80000)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

23:49:18 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000140)={0x55, 0xec3, 0x3, {0x1f, 0xeec}, {0xce, 0x3}, @rumble={0x64b9, 0xfff}})
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x20, 0x109000)
ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}]})
dup(0xffffffffffffffff)

23:49:18 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0xf8, 0x3d0, 0x3d0, 0xf8, 0x230, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [0x0, 0xff], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 2014.710974] xt_CONNSECMARK: invalid mode: 0
[ 2014.739234] kauditd_printk_skb: 9 callbacks suppressed
[ 2014.739243] audit: type=1804 audit(1588722558.152:11492): pid=23143 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2063/bus" dev="sda1" ino=17158 res=1
23:49:18 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x0, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2015.120718] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:18 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x3000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xffffffff, 0xb, 0xe}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'erspan0\x00', <r7=>0x0})
r8 = socket(0x10, 0x3, 0x0)
r9 = socket(0x11, 0x800000003, 0x0)
bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r9, &(0x7f00000003c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x148, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xffffffff, 0xb}}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x148}}, 0x0)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffb, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffff7, 0x3}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x77, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xffffffffffffffff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000024}, 0x811)

[ 2015.174406] audit: type=1804 audit(1588722558.592:11493): pid=23143 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2063/bus" dev="sda1" ino=17158 res=1
[ 2015.205113] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:18 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x79, 0x5, 0x9, 0x5, 0x8, 0x81})
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10fe43"], 0x4)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TUNSETLINK(r5, 0x400454cd, 0xfcf8)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
ioctl$int_out(r3, 0x0, &(0x7f0000000640))
sendfile(r3, r4, 0x0, 0x8482)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$AUDIT_TRIM(r7, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8508240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x0, 0x70bd2d, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000)

23:49:18 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(0x0, 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:18 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x0, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2015.504284] audit: type=1800 audit(1588722558.832:11494): pid=23155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17158 res=0
[ 2015.611956] audit: type=1800 audit(1588722558.832:11495): pid=23143 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17158 res=0
[ 2015.797260] audit: type=1804 audit(1588722559.012:11496): pid=23177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2064/bus" dev="sda1" ino=16122 res=1
[ 2015.844966] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2015.951724] audit: type=1804 audit(1588722559.022:11497): pid=23177 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2064/bus" dev="sda1" ino=16122 res=1
[ 2015.989098] xt_CONNSECMARK: invalid mode: 0
[ 2016.015998] xt_CONNSECMARK: invalid mode: 0
[ 2016.300838] audit: type=1804 audit(1588722559.712:11498): pid=23188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2064/bus" dev="sda1" ino=16122 res=1
[ 2016.373063] audit: type=1804 audit(1588722559.792:11499): pid=23188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2064/bus" dev="sda1" ino=16122 res=1
[ 2016.404715] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2016.450543] audit: type=1804 audit(1588722559.792:11500): pid=23188 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2064/bus" dev="sda1" ino=16122 res=1
23:49:21 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:21 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x0, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:21 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2})
dup(0xffffffffffffffff)

23:49:21 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x120)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
set_thread_area(&(0x7f0000000140)={0x5, 0x1000, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x0, 0x5, 0x800, <r3=>r1, 0x0, &(0x7f0000000040)={0x980908, 0xad, [], @string=&(0x7f0000000000)=0xc5}})
ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000100)={0x0, 0xff, 0x6913, [], &(0x7f00000000c0)=0x2})

23:49:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(0x0, 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="110700000000000000000600000008000340", @ANYRESHEX, @ANYBLOB="6eff83115297603fa9183a7aff929b5c60def3d0e9f29f51e45310730a2199f0853193095df3c66d3be84549f6b00d63260a0ab26c065b2a419a162c9273dec551e00be6ec8b97906d0fa3b7c5244b46dcdcc42e1c68b1438b17dfe8d67d76cb59c54b94339e3a6fff83c867a7a32d8eb39aa94304fb966d5aa14fd5c8d06db57f49b7f6d0db14a1e55e281108854e87f7221bfa6b54798efb200186d63b2c3acb292828d2dd404dd1d4dd7673416058987ad3c26c4b3481558a601d2af2af31fad07785e890736ac9bcf7a3caea2e7da6fbfc7a24a1b266d4718f02920aad963058f64b1db6b688a58a3461be7639947cb302ca12bfe5c6"], 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1cafe16bf26e8cdc275355b4000000", @ANYBLOB="1f5144ee33cc05f7f2716e86060f0b35d5e62bdb15d794e8674e0502ac32c928c6dc224b6fb391e270bc6e009c50cff5265c7ea19e113efb7fe6c66413c2da74a4428a5614637cee4cca7b9a3c910cf9ffa79c7d97d3e3977720eef31fcb937d86ade7f3924adc21057591295068d3e9ea29443ce7da41bb7cd65e21e457f7f95c69a3415d7ab0890f85b7f9c3bd915b6c01ac00af2dc90186d5e61b8ade9808efd8a05672ddc0e2268ef0c246c177bc2247f1f72b444d35db043b2802b9eea98def5ed5a66a201ef9fbdb4e8cae3f97c0a4aa226bf671c939d894a867d9502529cd8fadcbdf0752473dc99e27771c4660", @ANYBLOB="1b0f301c880000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(0xffffffffffffffff, 0x2007fff)
r7 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="831be6"], 0x4)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000002000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000e9ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f58cc600a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r7, r8, 0x0, 0x8482)

23:49:21 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200})
dup(0xffffffffffffffff)

[ 2017.758859] xt_CONNSECMARK: invalid mode: 0
23:49:21 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x0, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:21 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x550, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0xc}, {0x0, 0x51}})
dup(0xffffffffffffffff)

[ 2018.068556] xt_CONNSECMARK: invalid mode: 0
23:49:21 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
socket$phonet(0x23, 0x2, 0x1)
dup(0xffffffffffffffff)

[ 2018.139420] xt_CONNSECMARK: invalid mode: 0
23:49:21 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x0, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:21 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(0x0, 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2018.805719] audit: type=1800 audit(1588722562.222:11501): pid=23226 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17227 res=0
[ 2020.140738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
23:49:24 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:24 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x0, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:24 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x10000000016, &(0x7f0000000200))
ptrace(0x10, r4)
sched_getattr(r4, &(0x7f0000000000)={0x38}, 0x38, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:49:24 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x1}, 0xffffffffffffff97, &(0x7f0000001880)=[{&(0x7f0000000600)="0a9fbb6b4e53830662d2296490b75237254367256e6b55be3d82b17142cb6fd0e19b9bd0e9493ede77240d66a239c595b3d3eaf015881e7837ad503a37687a3c834091a9e6cb87fc446328879b13d1511d80a25f4319a64002a3900a3106acc199016d56286553bb180b138995f0a3c51bdc1a984516e5c4400e4c0e8cbb8927a506881b45f95e93eac8894c205595525b9e39502c3233dd86db0c5fce358f8214a0d10d37a871211c4af507ead7b931900c4dcdf6cc6d2e96157a13727c1268cdbfc54e3f7246edec0e2b5e54f3238dfcd752", 0xd3}, {&(0x7f0000000700)="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", 0xfc}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001b40)="3aa30a0766bf54a3960f6bd232b6e591b69dad1b9f36bb0246499bd5a93c03429388a6ebca92ec6662c6691c32917106be62f6c669694cb5574a505715fd9e87425cc26c353ca223a2eddfb9cda0cf6ddc0abbf0f5bfbb18a719798ddb9d1416d958503559f4d2547e5abade7ef0a79f7fd7b37b870f9e1a07107d40639e0a25cb2b7f1cb616a2eb9cf61716d6dd9228007d155bd1a785f337b84f7343eff2c3256ad644407bff342b094c5dbf1aec91c400e2bf1f0f0d8877651b63e41e8bb7e47017b93e925d4f8c00850bd72748a899d32d3c5b395600d832af13ea58ea9ff65357e92881787bf23a4865992be699", 0xf0}, {&(0x7f0000001840)="5fee2a2f752e8157aafeec568532dcc2f98ba3467e5d83caf53cfb12f6c18208fe946ec6f23b44380cb9a78b2f4e7943a23cbaa8e02fd408d08bc30ca2d8", 0x3e}], 0x5, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0xde}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x30}, 0x1)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r3, 0x28}, 0x10)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001b00)={r6, &(0x7f00000019c0)="deeefc8ee3c9872d733fafbe3c7128d0ceb5267ad1de730e2d026242c3b0e25d6b9d56f2ec15613fcaf624a02d2cc7bb580a8e7fb801fecbc41a5675f11681ed2abc7b29d5b348f5667538a534a203bbfd0134", &(0x7f0000001a40)="b82b615a7ad4068d419a1dbb01b929597cebad0e9c383127fdbaf1fc06ac2055d7c1a3b4d79bcd32a58c73ed19e20aa1b86b570dcd77cf230d2fdcbb9140ad3a85e76376342fe25bba4f2270c69edd874ca06bf41c64e0af9b1e31e12fd5668ec3b6f7dea948014b8b85ad41a062417e8050699fb8f86bd9b63175f3604c705d7c0a7aa20fcd1d2fe96a0e0644399597009f7c10537d48", 0x2}, 0x20)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000001980)=0xd)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f145000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

23:49:24 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:24 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20002, 0x0)
ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000000100))
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x88, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:49:24 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x126, &(0x7f0000db0000/0x1000)=nil)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp\x00')
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)='?', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendfile(r2, r1, 0x0, 0xedc0)
shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x5000)
r4 = pkey_alloc(0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
recvfrom$unix(r5, &(0x7f0000000000)=""/21, 0x15, 0x2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
pkey_free(r4)
pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, r4)

[ 2020.806628] xt_CONNSECMARK: invalid mode: 0
[ 2021.009828] xt_CONNSECMARK: invalid mode: 0
23:49:24 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x0, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:24 executing program 5:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000300)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e20, 0xd5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}, @in6={0xa, 0x4e21, 0x7, @loopback, 0x81}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000380)=0x10)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_team\x00', {0x7}, 0xf07b})
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x82000, 0x0)

23:49:24 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 2021.269504] xt_CONNSECMARK: invalid mode: 0
23:49:24 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x0, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:25 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2021.647035] kauditd_printk_skb: 5 callbacks suppressed
[ 2021.647044] audit: type=1804 audit(1588722565.052:11507): pid=23316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2066/bus" dev="sda1" ino=17441 res=1
[ 2021.650991] audit: type=1804 audit(1588722565.052:11508): pid=23318 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2066/bus" dev="sda1" ino=17441 res=1
[ 2022.068909] xt_CONNSECMARK: invalid mode: 0
[ 2022.084859] audit: type=1804 audit(1588722565.493:11509): pid=23322 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2066/bus" dev="sda1" ino=17441 res=1
[ 2022.159007] audit: type=1804 audit(1588722565.523:11510): pid=23326 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2066/bus" dev="sda1" ino=17441 res=1
23:49:27 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:27 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3d)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:27 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getsockname$netrom(r2, &(0x7f0000000380)={{}, [@remote, @remote, @netrom, @remote, @default, @netrom, @rose, @netrom]}, &(0x7f0000000400)=0xfffffd1c)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0)
ftruncate(r4, 0xcea)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000240)={<r7=>0x0, 0x9}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000340)={r7, 0xa3a, 0x6}, 0x8)
sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="c16800000001020101000000001b0000000700000508000440000000014c0001802c0001801400030000000000000000000000e80fac1e000114000400fe800000000000000009000000000016140050e807430100ac1414aa080002006401010206000340000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000480)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200})
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
dup(0xffffffffffffffff)

23:49:27 executing program 4:
shmget$private(0x0, 0x3000, 0x800, &(0x7f0000b6a000/0x3000)=nil)
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000000))
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x7000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:27 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2023.821916] audit: type=1804 audit(1588722567.233:11511): pid=23394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2067/bus" dev="sda1" ino=17545 res=1
[ 2023.854959] xt_CONNSECMARK: invalid mode: 0
[ 2023.864755] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2023.919977] audit: type=1804 audit(1588722567.323:11512): pid=23408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2067/bus" dev="sda1" ino=17545 res=1
[ 2023.957674] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1079be7096dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 2023.970014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2023.979211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 2024.060793] audit: type=1800 audit(1588722567.363:11513): pid=23394 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17545 res=0
[ 2024.121485] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2024.149382] audit: type=1800 audit(1588722567.363:11514): pid=23408 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17545 res=0
[ 2024.193433] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2024.232212] audit: type=1804 audit(1588722567.523:11515): pid=23416 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2068/bus" dev="sda1" ino=17545 res=1
23:49:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r5, 0xc0405519, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x7, 'syz1\x00'})
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f00000000c0)=0x4)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 2024.338231] audit: type=1804 audit(1588722567.593:11516): pid=23419 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2068/bus" dev="sda1" ino=17545 res=1
23:49:28 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:28 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2024.644493] xt_CONNSECMARK: invalid mode: 0
23:49:28 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:28 executing program 4:
r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:30 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:30 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "", [[], [], [], [], [], []]}, 0x620)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:30 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:30 executing program 4:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fanotify_mark(r2, 0x80, 0x1a, r0, &(0x7f0000000040)='./bus\x00')

23:49:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="6fef8d1d004117f5fa103e371534572efb00"/33], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f31000062617461642dc57c6db27b54c70000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:30 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x1d, 0x129, &(0x7f0000000300)})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getpeername$tipc(r5, &(0x7f0000000000)=@name, &(0x7f0000000100)=0x10)

[ 2026.853264] kauditd_printk_skb: 9 callbacks suppressed
[ 2026.853274] audit: type=1804 audit(1588722570.263:11526): pid=23481 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2070/bus" dev="sda1" ino=17560 res=1
[ 2026.865123] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2026.950161] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:30 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0xca0129d3b449dec3, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x12)
ftruncate(r3, 0x2007fff)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TIOCL_SCROLLCONSOLE(r4, 0x541c, &(0x7f0000000000)={0xd, 0xffff3cd4})
r5 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x801, 0x0)
setsockopt$inet6_int(r8, 0x29, 0xa, &(0x7f0000000100)=0xffffff81, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff5f7a321b1b88e69281d903d4b1310f42909083b74777a2690ccd6896a9062462a0a62b7d7f7f782941e121158a1d48341493ea2efd4f0f4d1211a1df49808946440657b29fe9fe30ec791cbaa07ec6798ce599d2461c03147227a0c0582973b6cc369497563f92fa676ed59852058c94f796b938687432b2bf2a37fccd063acbf29105cd56e05e379a935343e40f379c3f1608a3f54606fa61501376a3541f6fa53c8ccdaa07e089684eb7d93378f44bc473f4eb808ce2ac06c8706b5dcefa40e6e909984677207230bb3750827817c0de5f790a78c887122b005b717268f02e272d79d5cd8580fd9bef5f19cb3759"], 0x1)
sendfile(r5, r6, 0x0, 0x8482)

[ 2027.097424] xt_CONNSECMARK: invalid mode: 0
23:49:30 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "", [[], [], [], [], [], []]}, 0x620)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:30 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = socket(0x80000000000000a, 0x2, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={r4, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000000c0)=0x84)

[ 2027.216184] audit: type=1804 audit(1588722570.343:11527): pid=23490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2070/bus" dev="sda1" ino=17560 res=1
[ 2027.217851] audit: type=1800 audit(1588722570.393:11528): pid=23481 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17560 res=0
23:49:31 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "", [[], [], [], [], [], []]}, 0x620)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:31 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2027.219214] audit: type=1800 audit(1588722570.393:11529): pid=23490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17560 res=0
23:49:31 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a", [[], [], [], [], [], []]}, 0x64d)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2028.180452] audit: type=1804 audit(1588722571.593:11530): pid=23510 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2071/bus" dev="sda1" ino=17553 res=1
[ 2028.293681] audit: type=1804 audit(1588722571.613:11531): pid=23518 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2071/bus" dev="sda1" ino=17553 res=1
[ 2028.392907] audit: type=1804 audit(1588722571.613:11532): pid=23519 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2071/bus" dev="sda1" ino=17553 res=1
[ 2028.467208] audit: type=1804 audit(1588722571.873:11533): pid=23540 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2071/bus" dev="sda1" ino=17553 res=1
23:49:33 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:33 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a", [[], [], [], [], [], []]}, 0x64d)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:33 executing program 3:
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000600)={{0xa, 0x4e22, 0xb0, @local}, {0xa, 0x4e20, 0x211, @mcast2, 0x20}, 0xa6, [0x10000, 0x9, 0x9b0, 0xffffffff, 0x1, 0x20, 0xfffffffd, 0x400]}, 0x5c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
close(r3)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r5, 0x5}, &(0x7f0000000100)=0x8)
rmdir(&(0x7f0000000000)='./bus\x00')
ftruncate(r2, 0x2007fff)
r6 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r8 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r6, r7, 0x0, 0x8482)

23:49:33 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x480481, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000780)={0x16, 0x200, [], [@generic={0x2, 0x1000, "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"}, @ra={0x5, 0x2, 0x6}]}, 0x1010)
ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x5, 0x2})
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), r3}}, 0x18)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000340), r3, 0x1}}, 0x18)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = creat(&(0x7f0000000300)='./bus\x00', 0x194)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendto$inet6(r4, &(0x7f0000000140)="71f8fbc8a3df62f6d0b68339401d486b0358e7fca74f082ac3f39f5280de14d838aa737a21f4c49b1e20502f4a22b6ea0ca7198778f619eff25453ebd4890f2f135427ee5175cdc1251cea39c091da2a1224c967667f8e23934f8c073d24c60052350772b74bb70f2a25d2b84b5596988f092e7cbf76862e001cfb439d88e1f5355950fd3c6ae6071341ae987b2a4d36f4d0bddb01633df18243fb49a08149aa6cb269aa3f1705bb0ad6f6b57aa10ce2cc855c65c51528c6e0446bda393f07dde5442a1fe84ca72e57b0f4b9a2f7795917850a953a895b2578ea", 0xda, 0x40094, &(0x7f0000000240)={0xa, 0x4e20, 0x7f, @remote, 0x8}, 0x1c)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x42, 0x0)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:33 executing program 5:
clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

23:49:33 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2029.909948] xt_CONNSECMARK: invalid mode: 0
[ 2029.921434] audit: type=1804 audit(1588722573.333:11534): pid=23575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2072/bus" dev="sda1" ino=17588 res=1
[ 2029.960131] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2030.113049] audit: type=1804 audit(1588722573.524:11535): pid=23575 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2072/bus" dev="sda1" ino=17588 res=1
23:49:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FITHAW(r2, 0xc0045878)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000200)='threaded\x00', 0x175d900f)
sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f00000000c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000600)="d841dadf0c1dffec2f5b37931eba306ea7830437997b9a0fb93d00000f2efa1058bfca49890b85a860a80079cf83a17c8dd776bc3fd56e7f78c965d856d0e228f4b8874793116e2c43d94b8c14f1536bb431d338913478a417b79d5a450ab6e93b15d9896ae36dfc6baa", 0x6a}, {&(0x7f0000000140)="841fd7fc595964765bb0689402d8064aa4f8b1650bd12754fae5e2bcb1bbdb8b", 0x20}, {&(0x7f0000000680)="84586b1397697a5541855c03f2b072ce16fff1c312a57cd61aa9354580bcb96256ca9bb64e730650d8a9fbe54e8da38ffbc72b44fc518644fc530645de21c36aa06d6c9b09c8790ae887ce86edf2bc07bd885300fa5b69ad25885a316cb2f8db3e2748e3ab", 0x65}, {&(0x7f0000000700)="e3319e53a029cc6221412f77d40d950f0a4964a2a9035207d0f27458a585805a6c10391e751e7bb88def149c732014cd5ac2ae7288b50798c0703696a867543293edf464a54a0bcd0e3522bc32260735eba734eccd5309c74218f2da836682e2d1601d77c5f7ca39c055d86f4c7c0a86027ce92fea090903d04f6b498473e2fa4f71736aa55a07abac9601fb58fd93114f66ba89d4ba39328f6df90c4ad26e25ad72f386a6d2099e9aaf7451620b7bcfc7c5f17235c9963cdfbe2998f2c4a8bbff193cf884f1172e22f89522c6b3d337cc3af712f924", 0xd6}, {&(0x7f0000000800)="4fe2e0f942472099b34427f85e19dd052e13c69081362b926dde4ed60d2237d8799b7d90c788cbffd234dc163afee04bee4c", 0x32}, {&(0x7f0000000840)="555768a5b1b71be3b6007badc01593a24b316530672246deaa07148d543a754423708a", 0x23}, {&(0x7f0000000c00)="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", 0x147}, {&(0x7f0000000980)="00648aff45be73b2c7a7f1bc661ae747856b75464309484b7580295d03ef4f0bf8594ac6dcd2edf72fdcb63e2ee5", 0x2e}], 0x8, &(0x7f0000000a40)=[@rights={{0x2c, 0x1, 0x1, [r2, r3, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r0, 0xffffffffffffffff]}}], 0x98, 0x40}, 0x20000000)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000))
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

23:49:34 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a", [[], [], [], [], [], []]}, 0x64d)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:34 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2030.768817] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:34 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3", [[], [], [], [], [], []]}, 0x664)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2030.826709] xt_CONNSECMARK: invalid mode: 0
23:49:35 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:35 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0xada)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
lseek(r6, 0xd9, 0x4)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
socket$inet6(0xa, 0x1, 0x0)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r7], 0x1)
sendfile(r4, r5, 0x0, 0x8482)

23:49:35 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3", [[], [], [], [], [], []]}, 0x664)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2032.208142] kauditd_printk_skb: 9 callbacks suppressed
[ 2032.208151] audit: type=1804 audit(1588722575.614:11545): pid=23640 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2074/bus" dev="sda1" ino=17581 res=1
[ 2032.579103] audit: type=1804 audit(1588722575.984:11546): pid=23661 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2074/bus" dev="sda1" ino=17581 res=1
[ 2032.639714] audit: type=1804 audit(1588722576.034:11547): pid=23640 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2074/bus" dev="sda1" ino=17581 res=1
[ 2032.708578] audit: type=1804 audit(1588722576.114:11548): pid=23662 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2074/bus" dev="sda1" ino=17581 res=1
23:49:36 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:36 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x40}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x5)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000240), &(0x7f0000000300)=0x4)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x400000000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x3}})
dup(r0)

23:49:36 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
uname(&(0x7f0000000000)=""/120)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000140)={0x6d, 0x80000000})
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x200, 0x0)
ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000100)={0x4, 0x1000, &(0x7f0000000300)="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"})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='\x00')

23:49:36 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3", [[], [], [], [], [], []]}, 0x664)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:36 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:36 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast1, 0x3}, 0x1c)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="10baedda042b1337273e88dadf"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff5d1e4e0ca631f9982fa0a3d634fd1f2b84e6efbd8252d2b6727528bfdd5ceeb2405f18e9faae478f092313aeb259e0c3354d75e42594387c86373cd30e4cc2d8ae3e85ed4279b0c529ad542873a9fa4a09e1bd3e2670f1a2e9a05d441c2ada7d1af2224f0fac75ac97b0d8e2d0a0832472fcc4565b583150e4a1ff56e0b513cdbca44bc40304a336e27fd1f2d6cf9bd79c6b7f1ceeb5a5f49e"], 0x1)
sendfile(r3, r5, 0x0, 0x8482)

[ 2032.909206] xt_CONNSECMARK: invalid mode: 0
23:49:36 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000300)={0x0, @reserved})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x780, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0x400, 0x200}, 0x0, 0x80})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)={0x9, [0xffff, 0x40], 0x3}, 0x10)
write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
dup(r8)

[ 2033.289812] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2033.339973] xt_CONNSECMARK: invalid mode: 0
23:49:37 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:37 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e", [[], [], [], [], [], []]}, 0x66f)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2033.822395] audit: type=1804 audit(1588722577.234:11549): pid=23688 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2075/bus" dev="sda1" ino=17570 res=1
[ 2033.960919] audit: type=1804 audit(1588722577.264:11550): pid=23698 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2075/bus" dev="sda1" ino=17570 res=1
[ 2034.306181] xt_CONNSECMARK: invalid mode: 0
23:49:37 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e", [[], [], [], [], [], []]}, 0x66f)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:37 executing program 4:
r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

[ 2034.416957] audit: type=1804 audit(1588722577.274:11551): pid=23701 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2075/bus" dev="sda1" ino=17570 res=1
[ 2034.472307] audit: type=1804 audit(1588722577.884:11552): pid=23709 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2075/bus" dev="sda1" ino=17570 res=1
23:49:38 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="10dadff3e0bf5f5ef5d2e40a855cf1edde179756b37cdb5d26887800e11080630ddbcc735de6057b05d3b8fbec62bea729a2e8ab4e455cb965eee214781db2b4fb02aa8e099580f2dbae5989435761e855a26fb33c3da7a600f9bd776ded7c4c23a33b8c90980a1137cf001ec1622a379eadc80468696ec7f743c4897e32f83da5e525ed71b5aea46a8ef258ad6af3d76a2cf9b185250f283b4808ea151ed4bad30907787628500b2ab4dd596afb55249355a789a252ebebe8826a9daa66eb3bcd55d2be59d5e53e34194d954469e35f13a83a3491000000000000"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRESDEC=r1, @ANYBLOB="678fc9054ad21eec33b73fa8457256759f8a18c199e2c9c36c508691e1bbe9f9e708d52c3eb3652eff19b8648df348400e653d6d93e04a0360479e03297052629099975778e49d3baa0f1034c165fed5386a19ab73a6058b11405efdb20117f9ab99510a6841c0d9b20bd8179376c5af7f35e36c097a7d3776a55d441f6d53d6194f73b20fe0324fe6c1b904dce539437f4d4a716250891a5900e4e99355e7edb66e8798e5df6d1131a0acb9a3166c7c4a"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x501042, 0x0)
syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x1, 0x200280)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='threaded\x00', 0x9)
r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r7, &(0x7f0000000200)='threaded\x00', 0x175d900f)
flistxattr(r7, &(0x7f00000000c0)=""/124, 0x7c)
read$FUSE(r6, &(0x7f0000000a40), 0x1000)

[ 2034.819345] audit: type=1804 audit(1588722578.234:11553): pid=23745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2076/bus" dev="sda1" ino=17608 res=1
[ 2034.848100] audit: type=1804 audit(1588722578.254:11554): pid=23745 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2076/bus" dev="sda1" ino=17608 res=1
23:49:39 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:39 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e", [[], [], [], [], [], []]}, 0x66f)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:39 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, 0x0, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:39 executing program 4:
shmat(0x0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r3)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e23, 0x0, 0x4e21, 0x9, 0xa, 0x20, 0x0, 0x32, 0x0, r3}, {0x401, 0x7, 0x47ec, 0x8001, 0x101, 0xffffffffffffff80, 0x0, 0x1780000000000}, {0x6, 0x200, 0x4}, 0x2, 0x6e6bb8, 0x1, 0x1, 0x2, 0x3}, {{@in=@private=0xa010102, 0x4d3, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x4, 0x1, 0x6, 0x5, 0x9, 0x3}}, 0xe8)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = getpid()
rt_tgsigqueueinfo(r4, r4, 0x10000000016, &(0x7f0000000200))
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000)
ptrace(0x10, r4)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x9397, 0x0, 0x20, 0x0, 0x8, r4})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:39 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="edb5824f86516b85a59dc679663cc6c9402c9e57192b14ce56a7aeb6463ea253ae480181738c6b6b0000000000c80f35211ebdd70d726ffefa5c01f2d878edc15e377592e74486e03658b69b0c11a12ee1d5c454803d4a01dabdf8312c8163bcf6041480c55ccb0b4e2331cf98db6a28d7b4b02fca741f341252eb78c223e68ed84c75797b41b553eddf596b392560198e089364c90d3b0731882a2c93e64be96b470e71652b00"/176], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:39 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fsetxattr$security_evm(r4, &(0x7f0000000000)='security.evm\x00', &(0x7f00000001c0)=@md5={0x1, "8b2234c872977cefdd803a907203941c"}, 0x11, 0x1)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
bind$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
dup(0xffffffffffffffff)

[ 2035.992414] xt_CONNSECMARK: invalid mode: 0
[ 2036.005731] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:39 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61", [[], [], [], [], [], []]}, 0x675)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2036.420480] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:39 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x6b)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000680)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000800c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009772000000000000000000d000f8000000000006000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff66a8a428555fab956310bb18463d977d6aa5b5ff7c0ea112d1fe84ff873c0069cacfcce76707759679a6ceae87dc983af69ad247a4147f85e7f6be2eaf11a90c3bd9b9e0cc1f7a4c322625be4cf2676daf59c03e46298975575f2e1b06d2931a6f3dd05ef985168d0e81e7d09b5f330ccfd8a5c3e1e3e3006dade62f4addac236e269f0d114fea35af1ad2510937cf84b8d5090f1306248f161e5f38a3653b766bf665e7e3cce706fa93042bf0bab9709a29b17df461500550a7c23c9ef26540bdb98aa6f3c180bfa46e9a6dff1cb779e5c659a7d35ea96cc8"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:40 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:40 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61", [[], [], [], [], [], []]}, 0x675)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:40 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000000))

[ 2037.342799] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:40 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000c70000/0x3000)=nil, 0x3000, 0x100000e, 0xffffffffffffffff)

[ 2037.400177] kauditd_printk_skb: 8 callbacks suppressed
[ 2037.400186] audit: type=1804 audit(1588722580.814:11563): pid=23807 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2079/bus" dev="sda1" ino=17629 res=1
[ 2037.441807] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:42 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61", [[], [], [], [], [], []]}, 0x675)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:42 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000))
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c8020000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a66a1c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060b10100000000000000000000a800d000000000000000000000000000000000000000000000004500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff25024aed70f29beb5885e371d05651b7853b6f00ec54048ad86f5a4080aea773e5fb9cc51f13e7becde06c610e2eca03a6f610f3ba93c586e3e323d120683c89e85d2aaa551d6b648fbcb17dc5f8ba5cf353ae80d68113b3"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:42 executing program 4:
shmat(0x0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:42 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:42 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000240)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000280))
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
fcntl$notify(r5, 0x402, 0x80000008)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="04010000", @ANYRES16=r7, @ANYBLOB="05ddffffffffff0fff000100000005000500fe00000008000300fdffffff0500060000000000"], 0x2c}, 0x1, 0x6c}, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000)
dup(0xffffffffffffffff)

[ 2039.042429] xt_CONNSECMARK: invalid mode: 0
[ 2039.058047] audit: type=1804 audit(1588722582.465:11564): pid=23833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2080/bus" dev="sda1" ino=17643 res=1
23:49:42 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:42 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570", [[], [], [], [], [], []]}, 0x678)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:42 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000007980), 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f00000054c0)=[{{&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/37, 0x25}], 0x2, &(0x7f00000011c0)=""/164, 0xa4}}, {{&(0x7f0000001280)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)=""/212, 0xd4}], 0x1, &(0x7f0000001440)=""/4096, 0x1000}}, {{&(0x7f0000002440)=@isdn, 0x80, &(0x7f0000002800)=[{&(0x7f00000024c0)=""/216, 0xd8}, {&(0x7f00000025c0)=""/206, 0xce}, {&(0x7f00000026c0)=""/224, 0xe0}, {&(0x7f00000027c0)=""/38, 0x26}], 0x4, &(0x7f0000002840)=""/143, 0x8f}, 0x2}, {{&(0x7f0000002900)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002980)=""/254, 0xfe}, {&(0x7f0000002a80)=""/4096, 0x1000}], 0x2}, 0x6}, {{&(0x7f0000003ac0)=@isdn, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003b40)=""/224, 0xe0}, {&(0x7f0000003c40)=""/104, 0x68}, {&(0x7f0000003cc0)=""/55, 0x37}, {&(0x7f0000003d00)=""/56, 0x38}, {&(0x7f0000003d40)=""/245, 0xf5}], 0x5, &(0x7f0000003ec0)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004ec0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000053c0), 0x0, &(0x7f0000005440)=""/66, 0x42}, 0xf6b}], 0x6, 0x20, 0x0)
vmsplice(r3, &(0x7f0000007900)=[{&(0x7f0000005640)="fd76105410c55d161c857098716d5f3c7d3a023454f0089f7e9cc4659832ce3608a5c6c95add9aa70aa99e4fcc74c063fc3e1ac9a61c0eb84378d29bbdd9ae46d3ba2b951667056ec3cf4919cf648e0aa36a44f9b57660a08912b8a88200526b5f3c67c19441e421616f84eebe384082a5df0bdb330663774da3315f747cdda69f629a3f1408abc8e4679a20aeb1a2fa5d32fc29c6ca8bf8ffd9fccc907e8629b6263180883d409447c6f843b709cf7b629cf25d2bed", 0xb6}, {&(0x7f0000005700)="8dbe9b66e39d3258957fa7861bb39aeeb7f61e4dcbae9727c9ef1b3d848a94efc25eaf7c41f2dd8f7666024c650a977dd2c33fb84655b53d55bef8c04f34bb0ac0b81658965c8fe779cd9314971c885bf6c7b5ff302809c019564c203c29a28661dcc184adc1de7b6714df6690b60c2f3386a6bd578f83f7a613ad510fa7dcdaf5f3f14eff162bb9321857a9cefe99f6d6ee4d9c299f983f441c13c8a3870fd92a456ed12e1151", 0xa7}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="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", 0x1000}, {&(0x7f00000077c0)="fbccc3ee18b5235a287c3e38f0c68479252865e09ba3a0132e6eab83b6ac2a99f1cc268db870aa82ade8b41ad78f845016f88954b31f52e8531b6cada51a42550e1d99889f0925b4cd220cd8d5c4ef826065133436629a2ed659c4521eb8b61a314ccc1bd5a481e11bae4eae74de3ba16bf90affee95110867ec09ee9392a0bf0ddd6d318210664f17605bcf7c0bac9374887f6ef9f23e72b8a168e426cca0f7a6e2bb5c9e7f5c4589225c40a58e19ff3531e1cb6a95ad70fa5664160066f740e4f46b4fc3d0198390ddd447b5e6e0e35240ea0e77b6d1aedf64d49056b4d8dde7e2ad47f7ec516c4ebfe1c1e7897fc02c9b60559f3a23", 0xf7}, {&(0x7f00000078c0)="04fce81c6b16b18337289a93ca19aa0b6494def1099d337204d5ae9fc42de8780dedca", 0x23}], 0x6, 0x0)
shmat(r1, &(0x7f0000db0000/0x1000)=nil, 0x5000)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/153)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$P9_ROPEN(r5, &(0x7f0000001180)={0x18, 0x71, 0x2, {{0x80, 0x1, 0x1}, 0x4}}, 0x18)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000005080)={&(0x7f0000004fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000005040)={&(0x7f0000005000)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x22000004}, 0x4000094)
setreuid(0x0, r6)
ioprio_get$uid(0x0, r6)
creat(&(0x7f00000079c0)='./bus\x00', 0x80)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:43 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x20)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000100)=<r4=>0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r6)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x100)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x3, r4}, {0x2, 0x1, r6}], {0x4, 0x1}, [{0x8, 0x5, r7}], {}, {0x20, 0x3}}, 0x3c, 0x1)
ftruncate(r2, 0x2007fff)
r8 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r9 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="a9010000008cf67e6b5d876b41e5773147c5a266c1600de0e5a6123fabfec89d2a8a1b868d3d013fc2ecde4a43bfc0ae548bf7dd453c3c0a45e13f73aa70613bcf38dde8ecac7dda580d13815d0c2671882b126f0000000000"], 0x4)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r8, r9, 0x0, 0x8482)

[ 2039.558262] audit: type=1804 audit(1588722582.915:11565): pid=23851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2080/bus" dev="sda1" ino=17643 res=1
23:49:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3e)

23:49:43 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x0, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:43 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570", [[], [], [], [], [], []]}, 0x678)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2039.558966] audit: type=1800 audit(1588722582.945:11566): pid=23833 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17643 res=0
[ 2039.559793] audit: type=1800 audit(1588722582.945:11567): pid=23851 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17643 res=0
[ 2039.840936] xt_CONNSECMARK: invalid mode: 0
23:49:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3e)

23:49:43 executing program 5:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
clock_gettime(0x0, &(0x7f0000000140))
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ppoll(&(0x7f0000000300)=[{r0, 0x2200}, {r1, 0x104}, {r0, 0x10}, {r2, 0xc100}, {0xffffffffffffffff, 0x2100}, {r3, 0x1000}, {0xffffffffffffffff, 0x5211}], 0x7, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={[0x800]}, 0x8)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8})
clone(0x80021100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x0, 0x1e0, 0x356, 0x800, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x2}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x212, 0x0, 0x0, 0x0, 0x3, 0xa})
dup(0xffffffffffffffff)

23:49:43 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(0x0, 0x3e)

[ 2040.616864] audit: type=1804 audit(1588722584.025:11568): pid=23883 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2081/bus" dev="sda1" ino=17624 res=1
23:49:44 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570", [[], [], [], [], [], []]}, 0x678)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2040.670620] audit: type=1804 audit(1588722584.025:11569): pid=23900 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2081/bus" dev="sda1" ino=17624 res=1
[ 2040.746375] audit: type=1804 audit(1588722584.035:11570): pid=23904 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2081/bus" dev="sda1" ino=17624 res=1
23:49:44 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:44 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000bea000/0x2000)=nil, 0x5000)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000)=0x3, 0x4)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0xb3129840bed5ea6, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x80)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)

23:49:44 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca", [[], [], [], [], [], []]}, 0x679)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:44 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0xffff, 0x20, &(0x7f0000000600)="4ebc4976be11c26eb4321171b0c04f3958d7ea54b132830d441fbf9a6cd4723bc298bf0b7ab5f2f377f8c77b9c23090455ba111629828ee021c70b38300a25740e6d1e1ebe28217452363addd27ccb19365b20d05b1ee63837e86e878fa92bd64a0ac71e8f5584f02cb13d9aa9b50ee2472fc311ff04d66207c83eb598eb99dc86292296cccfbd717486f26d60cfad3f95be54209962296161ef19e3320b60a9ad2ae4d3f0d4db55a98be93884eec9fdf410b3a7ed72ead29bcab2a356dd611c337e0d8ec2206de35c71"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r3, 0x2007fff)
r4 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r4, r5, 0x0, 0x8482)
r7 = shmget(0x0, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil)
shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x5000)

23:49:44 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:45 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca", [[], [], [], [], [], []]}, 0x679)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2041.653533] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:45 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x1000000}, {0x7f}})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc)
dup(0xffffffffffffffff)

[ 2041.791473] xt_CONNSECMARK: invalid mode: 0
23:49:45 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2041.823231] xt_CONNSECMARK: invalid mode: 0
23:49:45 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:45 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca", [[], [], [], [], [], []]}, 0x679)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:45 executing program 5:
lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='user.syz\x00', &(0x7f00000002c0)=""/221, 0xdd)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x405, 0x0, 0x0, {0x5f}}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x88, r5, 0x605, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e76540dc924f"}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xcb9a, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}]}, 0x88}, 0x1, 0x0, 0x0, 0xc800}, 0x20044000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0xa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff0001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008081}, 0x40010)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x10)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 2042.137674] audit: type=1800 audit(1588722585.545:11571): pid=23952 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17636 res=0
[ 2042.186310] audit: type=1804 audit(1588722585.555:11572): pid=23956 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2082/bus" dev="sda1" ino=17636 res=1
23:49:45 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2042.600182] xt_CONNSECMARK: invalid mode: 0
23:49:46 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x4})
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
socket$bt_bnep(0x1f, 0x3, 0x4)
socket$l2tp(0x2, 0x2, 0x73)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f)
dup(r5)

[ 2042.688403] audit: type=1800 audit(1588722585.555:11573): pid=23956 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17636 res=0
[ 2042.719950] xt_CONNSECMARK: invalid mode: 0
23:49:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="a0560662cd93ae69bc245a0be8923559bcb83c89cc389cdadff2c56640e75c9feeec58ee81526974cd28864194e2f0e2112d992ce6def670f65ee84211b9067cac7671de9fe796be718a89cbaa7a5585431a31454ea0f2dede50"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f31000062617461647630000000000000000000000000000000000000ab05ba37a30000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800"/1012], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:46 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], []]}, 0x57a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:46 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:46 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0xffffffffffffffff)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

23:49:46 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2042.758641] audit: type=1804 audit(1588722585.555:11574): pid=23961 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2082/bus" dev="sda1" ino=17636 res=1
23:49:46 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x0, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

[ 2042.759708] audit: type=1804 audit(1588722586.035:11575): pid=23986 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2082/bus" dev="sda1" ino=17636 res=1
23:49:46 executing program 0:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:46 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], []]}, 0x57a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:46 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:46 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2042.879612] audit: type=1804 audit(1588722586.295:11576): pid=24026 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2083/bus" dev="sda1" ino=17674 res=1
23:49:47 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

[ 2042.902603] ptrace attach of "/root/syz-executor.0"[24028] was attempted by "/root/syz-executor.0"[24032]
[ 2043.109250] audit: type=1804 audit(1588722586.505:11577): pid=24033 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2083/bus" dev="sda1" ino=17674 res=1
[ 2043.174968] audit: type=1800 audit(1588722586.585:11578): pid=24026 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17674 res=0
[ 2043.177970] audit: type=1800 audit(1588722586.595:11579): pid=24033 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17674 res=0
[ 2043.281810] ptrace attach of "/root/syz-executor.0"[24051] was attempted by "/root/syz-executor.0"[24052]
[ 2043.455439] audit: type=1804 audit(1588722586.745:11580): pid=24057 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2084/bus" dev="sda1" ino=17657 res=1
[ 2043.590595] audit: type=1804 audit(1588722586.885:11581): pid=24061 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir314754761/syzkaller.Rrz7bQ/2084/bus" dev="sda1" ino=17657 res=1
[ 2043.590679] audit: type=1800 audit(1588722586.935:11582): pid=24057 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed" comm="syz-executor.3" name="bus" dev="sda1" ino=17657 res=0
[ 2044.056971] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:47 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x0, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:47 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], []]}, 0x57a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:47 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:47 executing program 4:
r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))
shmat(r0, &(0x7f0000db0000/0x1000)=nil, 0x5000)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040)=0x6, 0x4)
pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0xffffffffffffffff)

[ 2044.213591] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:47 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0)
fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000))
ftruncate(r2, 0x2007fff)
r3 = socket$inet6(0xa, 0x3, 0x2c)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x67)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
write$FUSE_DIRENT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="10dadf"], 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c801000000000000c801000000000000c8020000c8020000c8020000c8020000c80200000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e465155455545000000000000000000000000000000000000000000000200000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000008700000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000050000000000000000d8000001000000000000000000000000000000000000000000000000300075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
sendfile(r3, r4, 0x0, 0x8482)

23:49:47 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = socket$inet6(0xa, 0x5, 0xfff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0xe8, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f0000000700), {[{{@ipv6={@ipv4={[], [], @broadcast}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], [0xff, 0xffffffff, 0x0, 0xffffff00], 'veth0_to_team\x00', 'bridge0\x00', {0xff}, {0xff}, 0x1d, 0x9, 0x2, 0x42}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffff, 0x1, 0x3, 0x75, 0x8, 0xf47, 0x10000, 0x7]}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 'virt_wifi0\x00', {0x57d}}}}, {{@ipv6={@mcast1, @empty, [0x0, 0xff, 0xffffff00, 0xff000000], [0xff, 0xff, 0xffffff00, 0xff], 'veth0\x00', 'gretap0\x00', {}, {0xff}, 0x87, 0x40, 0x5, 0x1}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}, {0x3, 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x6, 0x6}, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x80000000000000a, 0x2, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="398e1917", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0xa8, 0x20a, 0x7b, 0xd, r6}, &(0x7f0000000300)=0x10)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x88, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040010}, 0x91)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x10})
dup(0xffffffffffffffff)

23:49:48 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], []]}, 0x57a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:48 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000000)=0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
dup(0xffffffffffffffff)

[ 2044.709319] xt_CONNSECMARK: invalid mode: 0
23:49:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, &(0x7f0000000080)=[{0x0, 0xfffc}], 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2044.797461] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 2044.826568] xt_CONNSECMARK: invalid mode: 0
23:49:48 executing program 5:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x332, 0x300, 0x230, 0x3d0, 0x300, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@local}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @local, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000040)={0x5, 0x5, 0x3ff, 0x400, 0x4})
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00')
sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x800)
r4 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000300)={0x0, 0x0, 0xf00, 0x0, 0x400, 0x0, 0x4, 0x400000, {}, {0x0, 0x1}, {0x0, 0x1, 0x1}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8})
dup(0xffffffffffffffff)

[ 2044.916132] xt_CONNSECMARK: invalid mode: 0
23:49:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2044.941124] ip6_tables: ip6tables: counters copy to user failed while replacing table
23:49:48 executing program 2:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r2, &(0x7f00000002c0)={{0x107, 0x7f, 0x1, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], []]}, 0x57a)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:48 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xd, 0xffffffffffffff81}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f)
write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x7f, 0x0, 0xb4, 0x18, 0x1, 0x17, 0x7}, "f21694da50d0800b45a983f1e997825ff801b562096fb252b5e9dedc9a34dd52bc5b8f85cd3eb49265ed457d1a08f5f9324e74a683de1b41272d6db8ad95cca5a3fc8ba3856c6fa5c1b5140b83767e676efea85b61371570ca5e", [[], [], [], [], [], []]}, 0x67a)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)

23:49:48 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

23:49:49 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
semop(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3e)

[ 2045.747257] kasan: CONFIG_KASAN_INLINE enabled
[ 2045.747265] kasan: GPF could be caused by NULL-ptr deref or user memory access
[ 2045.747277] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[ 2045.747281] Modules linked in:
[ 2045.747292] CPU: 1 PID: 6343 Comm: syz-executor.5 Not tainted 4.14.179-syzkaller #0
[ 2045.747296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2045.747302] task: ffff88805e4c0080 task.stack: ffff88805e4c8000
[ 2045.747315] RIP: 0010:wait_consider_task+0x80/0x3030
[ 2045.747319] RSP: 0018:ffff88805e4cfb30 EFLAGS: 00010206
[ 2045.747326] RAX: 00ee0eeee0ee0edd RBX: 0000000000000000 RCX: 07707777077076eb
[ 2045.747331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805e4cfd08
[ 2045.747336] RBP: dffffc0000000000 R08: 0000000000000ec1 R09: ffffffff8a066e48
[ 2045.747340] R10: ffff88805e4c0908 R11: ffff88805e4c0080 R12: ffff88805e4cfd08
[ 2045.747345] R13: 077077770770726f R14: 077077770770726f R15: ffff88805e4cfd08
[ 2045.747352] FS:  0000000001b21940(0000) GS:ffff8880aeb00000(0000) knlGS:0000000000000000
[ 2045.747356] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2045.747361] CR2: 0000000000514ae0 CR3: 000000005e490000 CR4: 00000000001426e0
[ 2045.747369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2045.747373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 2045.747376] Call Trace:
[ 2045.747390]  ? find_held_lock+0x2d/0x110
[ 2045.747397]  ? do_wait+0x16a/0x930
[ 2045.747407]  ? release_task+0x1430/0x1430
[ 2045.747413]  ? do_wait+0x362/0x930
[ 2045.747424]  do_wait+0x3e9/0x930
[ 2045.747450]  ? wait_consider_task+0x3030/0x3030
[ 2045.747459]  ? save_trace+0x290/0x290
[ 2045.747468]  kernel_wait4+0x103/0x1e0
[ 2045.747476]  ? SyS_waitid+0x40/0x40
[ 2045.747483]  ? find_held_lock+0x2d/0x110
[ 2045.747493]  ? task_stopped_code+0x140/0x140
[ 2045.747502]  ? lock_downgrade+0x6e0/0x6e0
[ 2045.747512]  SYSC_wait4+0x106/0x110
[ 2045.747519]  ? kernel_wait4+0x1e0/0x1e0
[ 2045.747530]  ? _copy_to_user+0x82/0xd0
[ 2045.747539]  ? put_timespec64+0xaa/0xf0
[ 2045.747545]  ? nsecs_to_jiffies+0x30/0x30
[ 2045.747556]  ? SyS_clock_gettime+0xf5/0x180
[ 2045.747563]  ? SyS_clock_settime+0x1a0/0x1a0
[ 2045.747571]  ? do_syscall_64+0x4c/0x640
[ 2045.747578]  ? C_SYSC_wait4+0x110/0x110
[ 2045.747586]  do_syscall_64+0x1d5/0x640
[ 2045.747598]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 2045.747603] RIP: 0033:0x4166ca
[ 2045.747607] RSP: 002b:00007ffdc7bf1e78 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 2045.747613] RAX: ffffffffffffffda RBX: 00000000001f37ca RCX: 00000000004166ca
[ 2045.747618] RDX: 0000000040000001 RSI: 00007ffdc7bf1eb0 RDI: ffffffffffffffff
[ 2045.747622] RBP: 0000000000002242 R08: 0000000000000001 R09: 0000000001b21940
[ 2045.747626] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f
[ 2045.747630] R13: 00007ffdc7bf1eb0 R14: 00000000001f3493 R15: 00007ffdc7bf1ec0
[ 2045.747639] Code: 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 00 f3 f3 f3 e8 b3 b0 23 00 49 8d 8e 7c 04 00 00 48 89 c8 48 89 4c 24 08 48 c1 e8 03 <0f> b6 14 28 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 
[ 2045.747770] RIP: wait_consider_task+0x80/0x3030 RSP: ffff88805e4cfb30
[ 2045.747796] ---[ end trace 0e5af0d61b468e2d ]---
[ 2045.747799] Kernel panic - not syncing: Fatal exception
[ 2046.878968] Shutting down cpus with NMI
[ 2046.880466] Kernel Offset: disabled
[ 2047.193243] Rebooting in 86400 seconds..