0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:36 executing program 3:

[  478.115155] xt_HMARK: spi-set and port-set can't be combined
[  478.121829] xt_HMARK: spi-set and port-set can't be combined
17:33:36 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000046010000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:33:36 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:33:36 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:36 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x0, 0x89, 0x0, &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:36 executing program 3:

[  478.334565] xt_HMARK: spi-set and port-set can't be combined
[  478.341754] xt_HMARK: spi-set and port-set can't be combined
[  480.213834] Bluetooth: hci0: command 0x1003 tx timeout
[  480.220176] Bluetooth: hci0: sending frame failed (-49)
[  482.293867] Bluetooth: hci0: command 0x1001 tx timeout
[  482.302481] Bluetooth: hci0: sending frame failed (-49)
[  484.373896] Bluetooth: hci0: command 0x1009 tx timeout
17:33:46 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:33:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000060000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:33:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:33:46 executing program 3:

17:33:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x0, 0x89, 0x0, &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae01, 0x0)

[  488.342151] xt_HMARK: spi-set and port-set can't be combined
[  488.354588] xt_HMARK: spi-set and port-set can't be combined
17:33:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:33:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000060020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:33:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x0, 0x89, &(0x7f0000000780), &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:46 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:46 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0x0, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  488.562517] xt_HMARK: spi-set and port-set can't be combined
[  488.608920] xt_HMARK: spi-set and port-set can't be combined
[  490.453846] Bluetooth: hci0: command 0x1003 tx timeout
[  490.459909] Bluetooth: hci0: sending frame failed (-49)
[  492.533906] Bluetooth: hci0: command 0x1001 tx timeout
[  492.539385] Bluetooth: hci0: sending frame failed (-49)
[  494.613877] Bluetooth: hci0: command 0x1009 tx timeout
17:33:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:33:56 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000060030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:33:56 executing program 3:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0)
ftruncate(r0, 0x48280)
io_submit(r1, 0x20000000000001cb, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0)

17:33:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:56 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0x0, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:33:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x0, 0x89, &(0x7f0000000780), &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  498.609765] xt_HMARK: spi-set and port-set can't be combined
[  498.629541] xt_HMARK: spi-set and port-set can't be combined
17:33:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000064000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:33:57 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0x0, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  498.651624] audit: type=1804 audit(1579541636.968:80): pid=11442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir839331008/syzkaller.lXAC0l/81/bus" dev="sda1" ino=16958 res=1
17:33:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x0, 0x89, &(0x7f0000000780), &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:33:57 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:33:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000068030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  498.834539] xt_HMARK: spi-set and port-set can't be combined
[  498.847971] xt_HMARK: spi-set and port-set can't be combined
[  499.018722] audit: type=1804 audit(1579541637.338:81): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir839331008/syzkaller.lXAC0l/81/bus" dev="sda1" ino=16958 res=1
[  500.693925] Bluetooth: hci0: command 0x1003 tx timeout
[  500.700768] Bluetooth: hci0: sending frame failed (-49)
[  502.773874] Bluetooth: hci0: command 0x1001 tx timeout
[  502.779295] Bluetooth: hci0: sending frame failed (-49)
[  504.853963] Bluetooth: hci0: command 0x1009 tx timeout
17:34:07 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x10, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x400006a030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:07 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

17:34:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  508.826605] xt_HMARK: spi-set and port-set can't be combined
[  508.835452] xt_HMARK: spi-set and port-set can't be combined
17:34:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x400007e030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x10, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000080030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:07 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  509.027993] xt_HMARK: spi-set and port-set can't be combined
[  509.039488] xt_HMARK: spi-set and port-set can't be combined
[  510.943847] Bluetooth: hci0: command 0x1003 tx timeout
[  510.949257] Bluetooth: hci0: sending frame failed (-49)
[  513.023887] Bluetooth: hci0: command 0x1001 tx timeout
[  513.029275] Bluetooth: hci0: sending frame failed (-49)
[  515.093863] Bluetooth: hci0: command 0x1009 tx timeout
17:34:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:17 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000088010000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x10, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:17 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000495000/0x400000)=nil, 0x404000, 0x8)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x439, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x3c}, 0x1, 0x4c00}, 0x0)

17:34:17 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000088030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  519.066634] xt_HMARK: spi-set and port-set can't be combined
[  519.078908] xt_HMARK: spi-set and port-set can't be combined
17:34:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  519.110848] IPVS: Error connecting to the multicast addr
17:34:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  519.156190] IPVS: Error connecting to the multicast addr
17:34:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x18, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x0, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:17 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, 0x9c)

[  519.229911] xt_HMARK: spi-set and port-set can't be combined
[  519.324658] xt_HMARK: spi-set and port-set can't be combined
[  521.183854] Bluetooth: hci0: command 0x1003 tx timeout
[  521.189258] Bluetooth: hci0: sending frame failed (-49)
[  523.253963] Bluetooth: hci0: command 0x1001 tx timeout
[  523.259483] Bluetooth: hci0: sending frame failed (-49)
[  525.333936] Bluetooth: hci0: command 0x1009 tx timeout
17:34:27 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:27 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000098020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:27 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
ioctl$int_in(r0, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

17:34:27 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x0, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x18, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:27 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x0, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  529.298870] xt_HMARK: spi-set and port-set can't be combined
[  529.321374] xt_HMARK: spi-set and port-set can't be combined
17:34:27 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000a30a0000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:27 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:27 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x18, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:27 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:27 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000a40a0000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  529.544671] xt_HMARK: spi-set and port-set can't be combined
[  529.563015] xt_HMARK: spi-set and port-set can't be combined
[  531.413871] Bluetooth: hci0: command 0x1003 tx timeout
[  531.419309] Bluetooth: hci0: sending frame failed (-49)
[  533.493970] Bluetooth: hci0: command 0x1001 tx timeout
[  533.499798] Bluetooth: hci0: sending frame failed (-49)
[  535.573898] Bluetooth: hci0: command 0x1009 tx timeout
17:34:37 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:37 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000b8000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:37 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1c, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:37 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:34:37 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ba000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  539.545270] xt_HMARK: spi-set and port-set can't be combined
[  539.554163] xt_HMARK: spi-set and port-set can't be combined
17:34:37 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:37 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1c, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:37 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:38 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

[  539.744773] xt_HMARK: spi-set and port-set can't be combined
17:34:38 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000bc030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  541.653944] Bluetooth: hci0: command 0x1003 tx timeout
[  541.659354] Bluetooth: hci0: sending frame failed (-49)
[  543.733919] Bluetooth: hci0: command 0x1001 tx timeout
[  543.739337] Bluetooth: hci0: sending frame failed (-49)
[  545.813937] Bluetooth: hci0: command 0x1009 tx timeout
17:34:48 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:48 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1c, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:48 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:34:48 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000d0000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  549.788557] xt_HMARK: spi-set and port-set can't be combined
17:34:48 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000d2020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:48 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1e, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e3", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:48 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:48 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:34:48 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x969, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  549.981601] xt_HMARK: spi-set and port-set can't be combined
[  551.893892] Bluetooth: hci0: command 0x1003 tx timeout
[  551.899296] Bluetooth: hci0: sending frame failed (-49)
[  553.973856] Bluetooth: hci0: command 0x1001 tx timeout
[  553.979275] Bluetooth: hci0: sending frame failed (-49)
[  556.053869] Bluetooth: hci0: command 0x1009 tx timeout
17:34:58 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:34:58 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000dc020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:58 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:34:58 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1e, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e3", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:58 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:34:58 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000de030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:58 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  560.041426] xt_HMARK: spi-set and port-set can't be combined
17:34:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:58 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1e, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e3", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:34:58 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000e0030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:34:58 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

[  560.275960] xt_HMARK: spi-set and port-set can't be combined
[  562.133891] Bluetooth: hci0: command 0x1003 tx timeout
[  562.139314] Bluetooth: hci0: sending frame failed (-49)
[  564.223897] Bluetooth: hci0: command 0x1001 tx timeout
[  564.229279] Bluetooth: hci0: sending frame failed (-49)
[  566.303832] Bluetooth: hci0: command 0x1009 tx timeout
17:35:08 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:08 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000e1000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", 0x0}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:08 executing program 3:
syz_mount_image$iso9660(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

[  570.264455] xt_HMARK: spi-set and port-set can't be combined
17:35:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:08 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000e2030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", 0x0}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:08 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:35:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:08 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000e8030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  570.511226] xt_HMARK: spi-set and port-set can't be combined
[  572.373916] Bluetooth: hci0: command 0x1003 tx timeout
[  572.379355] Bluetooth: hci0: sending frame failed (-49)
[  574.453945] Bluetooth: hci0: command 0x1001 tx timeout
[  574.459467] Bluetooth: hci0: sending frame failed (-49)
[  576.533890] Bluetooth: hci0: command 0x1009 tx timeout
17:35:18 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:18 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ec020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:18 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:35:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", 0x0}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  580.503159] xt_HMARK: spi-set and port-set can't be combined
17:35:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:18 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ee000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:18 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session', 0x3d, 0x1ff}}]})

17:35:19 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:19 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ee030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  580.801062] xt_HMARK: spi-set and port-set can't be combined
[  582.623811] Bluetooth: hci0: command 0x1003 tx timeout
[  582.629265] Bluetooth: hci0: sending frame failed (-49)
[  584.693836] Bluetooth: hci0: command 0x1001 tx timeout
[  584.699240] Bluetooth: hci0: sending frame failed (-49)
[  586.773966] Bluetooth: hci0: command 0x1009 tx timeout
17:35:29 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:29 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f0030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:29 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:35:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  590.763365] xt_HMARK: spi-set and port-set can't be combined
17:35:29 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f06c0300, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  590.810736] ISOFS: Unable to identify CD-ROM format.
17:35:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x0, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:29 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:35:29 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x6, 0x0, [{0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  591.021045] xt_HMARK: spi-set and port-set can't be combined
[  591.103579] ISOFS: Unable to identify CD-ROM format.
[  592.853843] Bluetooth: hci0: command 0x1003 tx timeout
[  592.859222] Bluetooth: hci0: sending frame failed (-49)
[  594.934017] Bluetooth: hci0: command 0x1001 tx timeout
[  594.939454] Bluetooth: hci0: sending frame failed (-49)
[  597.013832] Bluetooth: hci0: command 0x1009 tx timeout
17:35:39 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:39 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f2030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:39 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

17:35:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x0, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x45, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  600.982018] xt_HMARK: spi-set and port-set can't be combined
17:35:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x0, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:39 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f6010000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  601.058580] ISOFS: Unable to identify CD-ROM format.
17:35:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x0, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x45, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  601.127596] xt_HMARK: spi-set and port-set can't be combined
17:35:39 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}]})

[  601.230940] xt_HMARK: spi-set and port-set can't be combined
[  601.333475] ISOFS: Unable to identify CD-ROM format.
[  603.093835] Bluetooth: hci0: command 0x1003 tx timeout
[  603.099297] Bluetooth: hci0: sending frame failed (-49)
[  605.173890] Bluetooth: hci0: command 0x1001 tx timeout
[  605.179334] Bluetooth: hci0: sending frame failed (-49)
[  607.253974] Bluetooth: hci0: command 0x1009 tx timeout
17:35:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:49 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f6020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x45, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:49 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:49 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}]})

17:35:49 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f6030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:49 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  611.230146] xt_HMARK: spi-set and port-set can't be combined
[  611.236570] xt_HMARK: spi-set and port-set can't be combined
17:35:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  611.323563] ISOFS: Unable to identify CD-ROM format.
17:35:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x67, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2b"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:49 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:35:49 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f8020000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:49 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}]})

[  611.511815] xt_HMARK: spi-set and port-set can't be combined
[  611.526099] xt_HMARK: spi-set and port-set can't be combined
17:35:49 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000f9030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x67, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2b"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  611.778615] xt_HMARK: spi-set and port-set can't be combined
[  611.784919] ISOFS: Unable to identify CD-ROM format.
[  611.797596] xt_HMARK: spi-set and port-set can't be combined
17:35:50 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x233, &(0x7f0000000300)=[{&(0x7f00000003c0)="f9", 0x1}], 0x294}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24044075)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000), 0x4)
ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x3f)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x50, 0x4, 0x3f8, 0xc8, 0xc8, 0xc8, 0x1ac, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'bond_slave_0\x00', 'syzkaller1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0xf631, 0xfff}}}, {{@ipv6={@dev, @mcast1, [], [], 'rose0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xe4}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}, {{@ipv6={@remote, @dev, [], [], 'bridge0\x00', 'ip_vti0\x00'}, 0x0, 0x160, 0x184, 0x0, {}, [@common=@unspec=@conntrack2={{0xbc, 'conntrack\x00'}, {{@ipv6=@remote, [], @ipv4=@empty, [], @ipv6=@remote, [], @ipv6=@loopback}}}]}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x454)
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000100))
read$alg(r2, &(0x7f0000000100), 0x0)

17:35:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000fa030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:50 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session'}}]})

17:35:50 executing program 1:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), 0xc)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)

17:35:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x67, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2b"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  612.027036] xt_HMARK: spi-set and port-set can't be combined
[  612.060546] xt_HMARK: spi-set and port-set can't be combined
17:35:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000fc030000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  612.087884] ISOFS: Invalid session number or type of track
[  612.093557] ISOFS: Invalid session number
17:35:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x78, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  612.182973] ISOFS: Unable to identify CD-ROM format.
17:35:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x40000ffffff7f, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:50 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:50 executing program 1:
r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000680)={0x3, 0x83})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400001}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x50000000}]}, 0x24}}, 0x80)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x4000, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x126, 0x70bd2b, 0x6c, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r4}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x101}]}, 0x68}}, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x16c, 0x244)
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x0, @local}}, 0x0, 0x200000000000025, 0x2}, 0xd8)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000100)=@fragment={0x6, 0x0, 0x8, 0x1, 0x0, 0x6, 0x68}, 0x8)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r6, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x86}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x60, 0x0, 0x234, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0b11}]}, 0x60}, 0x1, 0x0, 0x0, 0x8051}, 0x90)
write$binfmt_elf64(r5, &(0x7f0000000500)=ANY=[], 0xffffffdf)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents(r7, &(0x7f0000000140)=""/89, 0x10)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000feb000/0x12000)=nil, 0x12000}, &(0x7f0000000700)=0x10)

[  612.270969] xt_HMARK: spi-set and port-set can't be combined
17:35:50 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session'}}]})

17:35:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x100000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  612.373217] xt_HMARK: spi-set and port-set can't be combined
17:35:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x78, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:50 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

17:35:50 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040))
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:50 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

[  612.555749] ISOFS: Invalid session number or type of track
[  612.578102] ISOFS: Invalid session number
17:35:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x78, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  612.668223] ISOFS: Unable to identify CD-ROM format.
17:35:51 executing program 4:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

17:35:51 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x200000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:51 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@nocompress='nocompress'}, {@session={'session'}}]})

[  612.963344] ISOFS: Invalid session number or type of track
[  612.982248] ISOFS: Invalid session number
[  613.013016] ISOFS: Unable to identify CD-ROM format.
17:35:51 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00')
getdents(r0, &(0x7f0000000000)=""/98, 0x62)

17:35:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040))
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x81, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:51 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x300000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:51 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:35:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:51 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000002c000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xdef, 0x7}, {0xfffb, 0x0, 0x9}, {0xffff, 0xff, 0x6}]})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000200, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17:35:51 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x700000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:51 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session'}}]})

17:35:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x81, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040))
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:51 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x800000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  613.513090] ISOFS: Invalid session number or type of track
[  613.539271] ISOFS: Invalid session number
17:35:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x81, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x0, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  613.657011] kvm: pic: non byte write
17:35:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xa00000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  613.688080] ISOFS: Unable to identify CD-ROM format.
[  613.695163] kvm: pic: level sensitive irq not supported
[  613.695523] kvm: pic: non byte write
[  613.734976] kvm: pic: non byte write
17:35:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  613.767173] kvm: pic: non byte write
[  613.790389] kvm: pic: non byte write
17:35:52 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session'}}]})

[  613.810610] kvm: pic: non byte write
[  613.821080] kvm: pic: non byte write
[  613.850341] kvm: pic: non byte write
[  613.874599] kvm: pic: non byte write
[  613.889865] kvm: pic: non byte write
[  613.985147] ISOFS: Invalid session number or type of track
[  613.998371] ISOFS: Invalid session number
17:35:52 executing program 1:

17:35:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x85, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xc00000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x0, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  614.025689] ISOFS: Unable to identify CD-ROM format.
17:35:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x85, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xe00000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:52 executing program 3:
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session'}}]})

17:35:52 executing program 1:

17:35:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x0, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x1000000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  614.316053] ISOFS: Invalid session number or type of track
[  614.321732] ISOFS: Invalid session number
17:35:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x85, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 1:

17:35:52 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x1203000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  614.484460] ISOFS: Unable to identify CD-ROM format.
17:35:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x87, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a759"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:52 executing program 1:

17:35:53 executing program 1:

17:35:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x1800000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:53 executing program 3:

17:35:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x87, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a759"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 1:

17:35:53 executing program 3:

17:35:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:53 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x2401000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:53 executing program 1:

17:35:53 executing program 3:

17:35:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x87, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a759"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:53 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x2600000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 1:

17:35:53 executing program 3:

17:35:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x88, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596e"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 1:

17:35:53 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x3000000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 3:

17:35:53 executing program 1:

17:35:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x88, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596e"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:53 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:53 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x3400000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:53 executing program 3:

17:35:53 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 1:

17:35:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:54 executing program 3:

17:35:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x88, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596e"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:54 executing program 1:

17:35:54 executing program 3:

17:35:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:54 executing program 1:

17:35:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4400000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:54 executing program 3:

17:35:54 executing program 1:

17:35:54 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:35:54 executing program 3:

17:35:54 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xd600000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:54 executing program 1:

17:35:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  616.320046] Bluetooth: hci0: Frame reassembly failed (-84)
[  616.332915] Bluetooth: hci0: Frame reassembly failed (-84)
[  616.364721] hmark_tg_check: 62 callbacks suppressed
[  616.364729] xt_HMARK: spi-set and port-set can't be combined
[  616.386854] xt_HMARK: spi-set and port-set can't be combined
[  616.402014] xt_HMARK: spi-set and port-set can't be combined
17:35:54 executing program 3:

17:35:54 executing program 1:

[  616.419834] xt_HMARK: spi-set and port-set can't be combined
17:35:54 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xe000000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:35:54 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000), 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:35:54 executing program 3:

17:35:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  616.614215] xt_HMARK: spi-set and port-set can't be combined
[  616.662447] xt_HMARK: spi-set and port-set can't be combined
[  616.672038] xt_HMARK: spi-set and port-set can't be combined
[  616.702810] xt_HMARK: spi-set and port-set can't be combined
[  618.373910] Bluetooth: hci0: command 0x1003 tx timeout
[  618.379374] Bluetooth: hci0: sending frame failed (-49)
[  620.453951] Bluetooth: hci0: command 0x1001 tx timeout
[  620.459348] Bluetooth: hci0: sending frame failed (-49)
[  622.533887] Bluetooth: hci0: command 0x1009 tx timeout
17:36:04 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:04 executing program 1:

17:36:04 executing program 3:

17:36:04 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xfc01000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:04 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000), 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:04 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:04 executing program 3:

17:36:04 executing program 1:

[  626.591540] xt_HMARK: spi-set and port-set can't be combined
[  626.602537] xt_HMARK: spi-set and port-set can't be combined
[  626.610184] Bluetooth: hci0: Frame reassembly failed (-84)
[  626.615353] Bluetooth: hci0: Frame reassembly failed (-84)
[  626.643189] xt_HMARK: spi-set and port-set can't be combined
[  626.649401] xt_HMARK: spi-set and port-set can't be combined
17:36:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000), 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:05 executing program 3:

17:36:05 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xff03000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:05 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  626.840163] xt_HMARK: spi-set and port-set can't be combined
[  626.851430] xt_HMARK: spi-set and port-set can't be combined
[  626.873591] xt_HMARK: spi-set and port-set can't be combined
[  626.873954] xt_HMARK: spi-set and port-set can't be combined
[  628.613873] Bluetooth: hci0: command 0x1003 tx timeout
[  628.619325] Bluetooth: hci0: sending frame failed (-49)
[  630.693870] Bluetooth: hci0: command 0x1001 tx timeout
[  630.699293] Bluetooth: hci0: sending frame failed (-49)
[  632.773837] Bluetooth: hci0: command 0x1009 tx timeout
17:36:15 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:15 executing program 1:

17:36:15 executing program 3:

17:36:15 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:15 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:15 executing program 1:

17:36:15 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/239, 0xef}], 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000480)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

17:36:15 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  636.840867] xt_HMARK: spi-set and port-set can't be combined
[  636.855232] xt_HMARK: spi-set and port-set can't be combined
[  636.869418] Bluetooth: hci0: Frame reassembly failed (-84)
[  636.880913] Bluetooth: hci0: Frame reassembly failed (-84)
17:36:15 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:15 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:15 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x4, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  637.070308] xt_HMARK: spi-set and port-set can't be combined
[  637.097050] xt_HMARK: spi-set and port-set can't be combined
[  638.933915] Bluetooth: hci0: command 0x1003 tx timeout
[  638.940320] Bluetooth: hci0: sending frame failed (-49)
[  641.013977] Bluetooth: hci0: command 0x1001 tx timeout
[  641.019498] Bluetooth: hci0: sending frame failed (-49)
[  643.093943] Bluetooth: hci0: command 0x1009 tx timeout
17:36:25 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:25 executing program 1:
r0 = perf_event_open(&(0x7f0000000300)={0x2, 0xdb, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0xff})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/vga_arbiter\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1000000000022, 0x0, 0x0)
socket(0x8, 0x2, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000e80)=0x100, 0x4)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x340, 0x0, 0x1d4, 0x0, 0x0, 0x1d4, 0x2ac, 0x2ac, 0x2ac, 0x2ac, 0x2ac, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x84}, 0x0, 0x1b4, 0x1d4, 0x0, {}, [@common=@inet=@sctp={{0x144, 'sctp\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00', {}, {}, 0xda}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0xff59)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e20, @empty}})
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, <r3=>0x0})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xa7, 0x0, 0xfc, 0x4, 0x0, 0x200800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x29e9}, 0x40, 0x6, 0xc04f, 0x0, 0x0, 0xf3}, r3, 0x0, 0xffffffffffffffff, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4)
syz_open_procfs(0x0, &(0x7f0000000340)='maps\x00')
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmmsg$inet(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000040)='*', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d80)="d4f8a0bb8f373303f5f981f0eea6f0b1e1db28f23b96ced666adcdfea5cb7a304307593bb5ba0b4b791a8f8b0cf488e7aa4f51362867ee53f23f157ab29354910fb3791f220fcbd88def8ef425058cec11e0081a319e40fce011d5b984b5d108af5c19531daa29a8d21de236283f0c971f3757a34a4f408b64df09dbad1c0357ae18a2f04d4b03768aa55ac81779ebd864db3c3bb50915b3d878b2cab59b86d48047caaafdad389633ec30e07e958f0cc9ba908429d5e7bd3e262fb4ee6a9ce2", 0xc0}, {&(0x7f0000000ec0)="de57c731418fb7c97f98af1318f924f4c6605aebb388b1d91dae34fdd0c4b2decd83be8d143a16ae540362879e79ffa1ba1e7f88136d844e0653d8f2761b509b04f13294df60a2f13e4bc74eccf5", 0x4e}, {&(0x7f0000000f40)="46db8820f0473a81fa5b9c328ae5ea922a09654c51521e041fc47bfdb1bdb6f8a25305858bd5a05095fef60572620512ded9d11c64668dba936cf0c11a88e11abea537dff8c2a8d15126811fafdcde4a8d", 0x51}, {&(0x7f0000000fc0)="376615ae64f05e8e99efc443e59335eb1e548b5304ddbb530ba007fbab858b3ff0e92634456e28ca1ab1e15c06438c11353f6b01443b50b957d2efb3b52835b0f98aa7c9d715e7659b2f443be898d10ad188bf34359d35aacc7891ba716a09512af7ad469dbc5895542f3b81489b23976731964928ad56a5331e1ef89a1e660e51be85271d", 0x85}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="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", 0x1000}], 0x2000000000000066}}], 0x2, 0x4000000)

17:36:25 executing program 3:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x11, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000480)={r0, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

17:36:25 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x5, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:25 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:25 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc37, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001500010400000000802000000a1f0000", @ANYRES32, @ANYBLOB="08000200a0000020"], 0x20}}, 0x0)

17:36:25 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x6, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  647.068504] xt_HMARK: spi-set and port-set can't be combined
[  647.083591] xt_HMARK: spi-set and port-set can't be combined
17:36:25 executing program 3:
r0 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$inet(r0, &(0x7f0000008000)=[{{&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}}, {{&(0x7f0000000400)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0xc}}, @ip_retopts={{0x10, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x1c}}], 0x2, 0x0)

17:36:25 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:25 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:25 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  647.271653] xt_HMARK: spi-set and port-set can't be combined
[  647.284111] xt_HMARK: spi-set and port-set can't be combined
[  649.173848] Bluetooth: hci0: command 0x1003 tx timeout
[  649.180229] Bluetooth: hci0: sending frame failed (-49)
[  649.413883] Bluetooth: hci1: command 0x1003 tx timeout
[  649.419356] Bluetooth: hci1: sending frame failed (-49)
[  651.253939] Bluetooth: hci0: command 0x1001 tx timeout
[  651.259347] Bluetooth: hci0: sending frame failed (-49)
[  651.493921] Bluetooth: hci1: command 0x1001 tx timeout
[  651.499342] Bluetooth: hci1: sending frame failed (-49)
[  653.333831] Bluetooth: hci0: command 0x1009 tx timeout
[  653.573853] Bluetooth: hci1: command 0x1009 tx timeout
17:36:35 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:35 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39", 0x39}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:35 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x7, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:35 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:35 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:35 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x8, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  657.293945] xt_HMARK: spi-set and port-set can't be combined
[  657.301270] xt_HMARK: spi-set and port-set can't be combined
[  657.321470] xt_HMARK: spi-set and port-set can't be combined
17:36:35 executing program 1:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', 0x0, 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200", 0x12}], 0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000280))
getresgid(0x0, &(0x7f0000000500), 0x0)
chown(&(0x7f0000000480)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="44e05d8300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012"], 0x3}}, 0x0)
accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000400), &(0x7f0000000440)=0x28)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000003c0)={0x0, 0x1, {0xb, 0x2c, 0x0, 0x15, 0x4, 0x2, 0x4, 0x25}})
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x5, 0x1}]}}}]}, 0x44}}, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'bond_slave_0\x00'})

17:36:35 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, 0x0, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:35 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:35 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x9, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:35 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xa, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  657.521514] xt_HMARK: spi-set and port-set can't be combined
[  657.528061] xt_HMARK: spi-set and port-set can't be combined
[  657.581255] (unnamed net_device) (uninitialized): down delay (1) is not a multiple of miimon (2), delay rounded to 0 ms
17:36:36 executing program 3 (fault-call:3 fault-nth:0):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  657.923619] FAULT_INJECTION: forcing a failure.
[  657.923619] name failslab, interval 1, probability 0, space 0, times 0
[  657.935169] CPU: 0 PID: 12557 Comm: syz-executor.3 Not tainted 4.19.97-syzkaller #0
[  657.942974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  657.952341] Call Trace:
[  657.955078]  dump_stack+0x197/0x210
[  657.958707]  should_fail.cold+0xa/0x1b
[  657.962612]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  657.967717]  ? lock_downgrade+0x880/0x880
[  657.971955]  __should_failslab+0x121/0x190
[  657.976189]  should_failslab+0x9/0x14
[  657.979989]  kmem_cache_alloc_node+0x26c/0x710
[  657.984621]  __alloc_skb+0xd5/0x5f0
[  657.988251]  ? skb_trim+0x190/0x190
[  657.991874]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  657.997505]  ? netlink_autobind.isra.0+0x228/0x310
[  658.002445]  netlink_sendmsg+0x97b/0xd70
[  658.006513]  ? netlink_unicast+0x730/0x730
[  658.010805]  ? selinux_socket_sendmsg+0x36/0x40
[  658.015470]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  658.021004]  ? security_socket_sendmsg+0x8d/0xc0
[  658.025805]  ? netlink_unicast+0x730/0x730
[  658.030087]  sock_sendmsg+0xd7/0x130
[  658.033879]  ___sys_sendmsg+0x803/0x920
[  658.037856]  ? copy_msghdr_from_user+0x430/0x430
[  658.042614]  ? lock_downgrade+0x880/0x880
[  658.046857]  ? kasan_check_read+0x11/0x20
[  658.051004]  ? __fget+0x367/0x540
[  658.054449]  ? iterate_fd+0x360/0x360
[  658.058299]  ? __fget_light+0x1a9/0x230
[  658.062362]  ? __fdget+0x1b/0x20
[  658.065820]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  658.071366]  __sys_sendmsg+0x105/0x1d0
[  658.075253]  ? __ia32_sys_shutdown+0x80/0x80
[  658.079671]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  658.084429]  ? do_syscall_64+0x26/0x620
[  658.088454]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  658.093821]  ? do_syscall_64+0x26/0x620
[  658.097803]  __x64_sys_sendmsg+0x78/0xb0
[  658.101865]  do_syscall_64+0xfd/0x620
[  658.105678]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  658.110871] RIP: 0033:0x45b349
[  658.114071] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  658.132974] RSP: 002b:00007f6bba7e8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  658.140681] RAX: ffffffffffffffda RBX: 00007f6bba7e96d4 RCX: 000000000045b349
[  658.147948] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  658.155397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  658.162661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  658.169956] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000000
[  659.423960] Bluetooth: hci0: command 0x1003 tx timeout
[  659.429343] Bluetooth: hci0: sending frame failed (-49)
[  661.503931] Bluetooth: hci0: command 0x1001 tx timeout
[  661.509325] Bluetooth: hci0: sending frame failed (-49)
[  663.573870] Bluetooth: hci0: command 0x1009 tx timeout
17:36:45 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:45 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:45 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xb, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:45 executing program 1 (fault-call:0 fault-nth:0):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:36:45 executing program 3 (fault-call:3 fault-nth:1):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  667.537600] FAULT_INJECTION: forcing a failure.
[  667.537600] name failslab, interval 1, probability 0, space 0, times 0
[  667.543704] xt_HMARK: spi-set and port-set can't be combined
[  667.562784] FAULT_INJECTION: forcing a failure.
[  667.562784] name failslab, interval 1, probability 0, space 0, times 0
[  667.577551] xt_HMARK: spi-set and port-set can't be combined
[  667.587309] CPU: 1 PID: 12569 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  667.595144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  667.604508] Call Trace:
[  667.607243]  dump_stack+0x197/0x210
[  667.610902]  should_fail.cold+0xa/0x1b
[  667.614821]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  667.619945]  ? lock_downgrade+0x880/0x880
[  667.624141]  __should_failslab+0x121/0x190
[  667.628409]  should_failslab+0x9/0x14
[  667.632217]  __kmalloc+0x2e2/0x750
[  667.635770]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  667.641327]  ? fput+0x128/0x1a0
[  667.644636]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  667.650198]  ? strnlen_user+0x15f/0x1e0
[  667.654188]  ? __x64_sys_memfd_create+0x13c/0x470
[  667.659059]  __x64_sys_memfd_create+0x13c/0x470
[  667.663751]  ? memfd_fcntl+0x1750/0x1750
[  667.667832]  ? do_syscall_64+0x26/0x620
[  667.671833]  ? lockdep_hardirqs_on+0x415/0x5d0
[  667.676432]  ? trace_hardirqs_on+0x67/0x220
[  667.680774]  do_syscall_64+0xfd/0x620
17:36:45 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xc, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  667.684610]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  667.689816] RIP: 0033:0x45b349
[  667.693035] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  667.712036] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  667.719769] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  667.727053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
17:36:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xd, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  667.734343] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  667.741629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  667.748916] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000000
[  667.757377] CPU: 1 PID: 12571 Comm: syz-executor.3 Not tainted 4.19.97-syzkaller #0
17:36:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xe, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  667.765538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  667.796565] Call Trace:
[  667.806104]  dump_stack+0x197/0x210
[  667.820055]  should_fail.cold+0xa/0x1b
[  667.835544]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  667.850457]  ? lock_downgrade+0x880/0x880
[  667.854653]  __should_failslab+0x121/0x190
[  667.858903]  should_failslab+0x9/0x14
[  667.862720]  kmem_cache_alloc_node_trace+0x274/0x720
[  667.877351]  ? __alloc_skb+0xd5/0x5f0
[  667.881180]  __kmalloc_node_track_caller+0x3d/0x80
17:36:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0xf, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  667.886136]  __kmalloc_reserve.isra.0+0x40/0xf0
[  667.890836]  __alloc_skb+0x10b/0x5f0
[  667.894571]  ? skb_trim+0x190/0x190
[  667.898217]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  667.914109]  ? netlink_autobind.isra.0+0x228/0x310
[  667.930369]  netlink_sendmsg+0x97b/0xd70
[  667.934471]  ? netlink_unicast+0x730/0x730
17:36:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x10, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  667.938732]  ? selinux_socket_sendmsg+0x36/0x40
[  667.943420]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  667.948985]  ? security_socket_sendmsg+0x8d/0xc0
[  667.953763]  ? netlink_unicast+0x730/0x730
[  667.958019]  sock_sendmsg+0xd7/0x130
[  667.961764]  ___sys_sendmsg+0x803/0x920
[  667.965866]  ? copy_msghdr_from_user+0x430/0x430
[  667.970650]  ? lock_downgrade+0x880/0x880
[  667.974824]  ? kasan_check_read+0x11/0x20
[  667.978989]  ? __fget+0x367/0x540
[  667.982472]  ? iterate_fd+0x360/0x360
[  667.986309]  ? __fget_light+0x1a9/0x230
[  667.990304]  ? __fdget+0x1b/0x20
[  667.993691]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  668.003859]  __sys_sendmsg+0x105/0x1d0
[  668.007760]  ? __ia32_sys_shutdown+0x80/0x80
[  668.012189]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  668.017101]  ? do_syscall_64+0x26/0x620
[  668.021113]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  668.026506]  ? do_syscall_64+0x26/0x620
[  668.030513]  __x64_sys_sendmsg+0x78/0xb0
[  668.034608]  do_syscall_64+0xfd/0x620
[  668.038430]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  668.043644] RIP: 0033:0x45b349
[  668.046851] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  668.065769] RSP: 002b:00007f6bba7e8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  668.074109] RAX: ffffffffffffffda RBX: 00007f6bba7e96d4 RCX: 000000000045b349
[  668.081399] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
17:36:46 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x11, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  668.088859] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  668.096259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  668.114040] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000001
[  669.823818] Bluetooth: hci0: command 0x1003 tx timeout
[  669.829267] Bluetooth: hci0: sending frame failed (-49)
[  671.893888] Bluetooth: hci0: command 0x1001 tx timeout
[  671.899334] Bluetooth: hci0: sending frame failed (-49)
[  673.984041] Bluetooth: hci0: command 0x1009 tx timeout
17:36:56 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:36:56 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x12, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:36:56 executing program 1 (fault-call:0 fault-nth:1):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:36:56 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:56 executing program 3 (fault-call:3 fault-nth:2):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:36:56 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  678.421816] xt_HMARK: spi-set and port-set can't be combined
[  678.437097] FAULT_INJECTION: forcing a failure.
[  678.437097] name failslab, interval 1, probability 0, space 0, times 0
[  678.451515] FAULT_INJECTION: forcing a failure.
[  678.451515] name failslab, interval 1, probability 0, space 0, times 0
17:36:56 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x13, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  678.454139] CPU: 0 PID: 12616 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  678.473042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.482421] Call Trace:
[  678.485033]  dump_stack+0x197/0x210
[  678.488694]  should_fail.cold+0xa/0x1b
[  678.492628]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  678.497786]  ? lock_downgrade+0x880/0x880
[  678.502075]  __should_failslab+0x121/0x190
[  678.507110]  should_failslab+0x9/0x14
[  678.510925]  kmem_cache_alloc+0x2ae/0x700
[  678.515102]  ? __alloc_fd+0x44d/0x560
17:36:56 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x14, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  678.518933]  ? shmem_destroy_callback+0xc0/0xc0
[  678.523632]  shmem_alloc_inode+0x1c/0x50
[  678.527938]  alloc_inode+0x64/0x190
[  678.531606]  new_inode_pseudo+0x19/0xf0
[  678.535622]  new_inode+0x1f/0x40
[  678.539026]  shmem_get_inode+0x84/0x780
[  678.543034]  __shmem_file_setup.part.0+0x7e/0x2b0
[  678.547935]  shmem_file_setup+0x66/0x90
[  678.555829]  __x64_sys_memfd_create+0x2a2/0x470
[  678.560513]  ? memfd_fcntl+0x1750/0x1750
[  678.564591]  ? do_syscall_64+0x26/0x620
[  678.568623]  ? lockdep_hardirqs_on+0x415/0x5d0
[  678.573252]  ? trace_hardirqs_on+0x67/0x220
[  678.578651]  do_syscall_64+0xfd/0x620
[  678.582484]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  678.587972] RIP: 0033:0x45b349
[  678.591178] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  678.611852] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
17:36:56 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x15, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  678.619582] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  678.627007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
[  678.634288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  678.641600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  678.648978] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000001
[  678.658936] CPU: 1 PID: 12615 Comm: syz-executor.3 Not tainted 4.19.97-syzkaller #0
[  678.666951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.676317] Call Trace:
[  678.678922]  dump_stack+0x197/0x210
[  678.682579]  should_fail.cold+0xa/0x1b
[  678.686497]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  678.691644]  ? netlink_deliver_tap+0x146/0xc20
[  678.692750] xt_HMARK: spi-set and port-set can't be combined
[  678.696253]  __should_failslab+0x121/0x190
[  678.696274]  should_failslab+0x9/0x14
[  678.696288]  kmem_cache_alloc+0x47/0x700
17:36:57 executing program 1 (fault-call:0 fault-nth:2):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  678.696303]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  678.696317]  ? check_preemption_disabled+0x48/0x290
[  678.696334]  ? lock_acquire+0x16f/0x3f0
[  678.696351]  skb_clone+0x156/0x3e0
[  678.696370]  netlink_deliver_tap+0x97b/0xc20
[  678.696399]  netlink_unicast+0x5ae/0x730
[  678.746934]  ? netlink_attachskb+0x770/0x770
[  678.756609]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  678.762270]  netlink_sendmsg+0x8ae/0xd70
[  678.766360]  ? netlink_unicast+0x730/0x730
[  678.770623]  ? selinux_socket_sendmsg+0x36/0x40
[  678.776088]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  678.787172]  ? security_socket_sendmsg+0x8d/0xc0
[  678.792039]  ? netlink_unicast+0x730/0x730
[  678.796311]  sock_sendmsg+0xd7/0x130
[  678.800066]  ___sys_sendmsg+0x803/0x920
[  678.801825] FAULT_INJECTION: forcing a failure.
[  678.801825] name failslab, interval 1, probability 0, space 0, times 0
[  678.804090]  ? copy_msghdr_from_user+0x430/0x430
[  678.804113]  ? lock_downgrade+0x880/0x880
[  678.804131]  ? kasan_check_read+0x11/0x20
[  678.804149]  ? __fget+0x367/0x540
[  678.804169]  ? iterate_fd+0x360/0x360
[  678.804194]  ? __fget_light+0x1a9/0x230
[  678.804209]  ? __fdget+0x1b/0x20
[  678.804222]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  678.804244]  __sys_sendmsg+0x105/0x1d0
[  678.856369]  ? __ia32_sys_shutdown+0x80/0x80
[  678.860804]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  678.865587]  ? do_syscall_64+0x26/0x620
[  678.869574]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  678.874953]  ? do_syscall_64+0x26/0x620
[  678.878961]  __x64_sys_sendmsg+0x78/0xb0
[  678.883037]  do_syscall_64+0xfd/0x620
[  678.886852]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  678.892597] RIP: 0033:0x45b349
[  678.895803] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  678.914720] RSP: 002b:00007f6bba7e8c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
17:36:57 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  678.922444] RAX: ffffffffffffffda RBX: 00007f6bba7e96d4 RCX: 000000000045b349
[  678.929720] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  678.937000] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  678.944279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  678.951560] R13: 000000000000099e R14: 00000000004cb152 R15: 0000000000000002
[  678.963859] CPU: 1 PID: 12634 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
17:36:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x16, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  678.971688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.981051] Call Trace:
[  678.983660]  dump_stack+0x197/0x210
[  678.987310]  should_fail.cold+0xa/0x1b
[  678.991221]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  678.996925]  ? percpu_ref_put_many+0x94/0x190
[  679.001497]  __should_failslab+0x121/0x190
[  679.005750]  should_failslab+0x9/0x14
[  679.009566]  kmem_cache_alloc+0x2ae/0x700
[  679.013730]  ? map_id_range_down+0x1ee/0x370
[  679.018158]  ? __put_user_ns+0x70/0x70
[  679.022069]  selinux_inode_alloc_security+0xb6/0x2a0
[  679.027220]  security_inode_alloc+0x8a/0xd0
[  679.031563]  inode_init_always+0x56e/0xb40
[  679.035832]  alloc_inode+0x81/0x190
[  679.039490]  new_inode_pseudo+0x19/0xf0
[  679.043491]  new_inode+0x1f/0x40
[  679.046992]  shmem_get_inode+0x84/0x780
[  679.050995]  __shmem_file_setup.part.0+0x7e/0x2b0
[  679.055858]  shmem_file_setup+0x66/0x90
[  679.059852]  __x64_sys_memfd_create+0x2a2/0x470
[  679.064543]  ? memfd_fcntl+0x1750/0x1750
[  679.068648]  ? do_syscall_64+0x26/0x620
17:36:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x17, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  679.072752]  ? lockdep_hardirqs_on+0x415/0x5d0
[  679.077351]  ? trace_hardirqs_on+0x67/0x220
[  679.081699]  do_syscall_64+0xfd/0x620
[  679.085524]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  679.090723] RIP: 0033:0x45b349
[  679.093929] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  679.112842] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
17:36:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x18, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  679.120566] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  679.127846] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
[  679.135126] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  679.142409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  679.149690] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000002
17:36:57 executing program 1 (fault-call:0 fault-nth:3):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:36:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  679.309919] FAULT_INJECTION: forcing a failure.
[  679.309919] name failslab, interval 1, probability 0, space 0, times 0
[  679.342894] CPU: 0 PID: 12653 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  679.350732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  679.360198] Call Trace:
[  679.362811]  dump_stack+0x197/0x210
[  679.366490]  should_fail.cold+0xa/0x1b
[  679.370409]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  679.375542]  ? lock_downgrade+0x880/0x880
[  679.379732]  __should_failslab+0x121/0x190
[  679.383993]  should_failslab+0x9/0x14
[  679.387813]  kmem_cache_alloc+0x2ae/0x700
[  679.391987]  ? ktime_get_coarse_real_ts64+0xf0/0x2b0
[  679.397217]  ? lockdep_hardirqs_on+0x415/0x5d0
[  679.401813]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.407365]  ? timespec64_trunc+0xf0/0x180
[  679.411755]  __d_alloc+0x2e/0x9c0
[  679.415219]  ? ktime_get_coarse_real_ts64+0x1ba/0x2b0
[  679.420438]  d_alloc_pseudo+0x1e/0x70
[  679.424260]  alloc_file_pseudo+0xe2/0x280
[  679.428437]  ? __lockdep_init_map+0x10c/0x5b0
[  679.432973]  ? alloc_file+0x4d0/0x4d0
[  679.436799]  ? lockdep_annotate_inode_mutex_key+0x5b/0x70
[  679.442354]  ? kasan_check_write+0x14/0x20
[  679.446605]  __shmem_file_setup.part.0+0x108/0x2b0
[  679.451551]  shmem_file_setup+0x66/0x90
[  679.455551]  __x64_sys_memfd_create+0x2a2/0x470
[  679.460238]  ? memfd_fcntl+0x1750/0x1750
[  679.464311]  ? do_syscall_64+0x26/0x620
[  679.468307]  ? lockdep_hardirqs_on+0x415/0x5d0
[  679.472907]  ? trace_hardirqs_on+0x67/0x220
[  679.477244]  do_syscall_64+0xfd/0x620
[  679.481065]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  679.486266] RIP: 0033:0x45b349
[  679.489475] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  679.508391] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  679.516123] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  679.523408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
[  679.530158] xt_HMARK: spi-set and port-set can't be combined
[  679.530685] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  679.530695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  679.530703] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000003
17:36:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:36:57 executing program 1 (fault-call:0 fault-nth:4):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:36:57 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:57 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:36:57 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x19, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  679.672485] FAULT_INJECTION: forcing a failure.
[  679.672485] name failslab, interval 1, probability 0, space 0, times 0
[  679.685365] xt_HMARK: spi-set and port-set can't be combined
[  679.686858] xt_HMARK: spi-set and port-set can't be combined
[  679.711417] CPU: 1 PID: 12668 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  679.719271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  679.728653] Call Trace:
[  679.731285]  dump_stack+0x197/0x210
[  679.734947]  should_fail.cold+0xa/0x1b
[  679.738859]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  679.744099]  ? lock_downgrade+0x880/0x880
[  679.748250]  __should_failslab+0x121/0x190
[  679.752478]  should_failslab+0x9/0x14
[  679.756282]  kmem_cache_alloc+0x2ae/0x700
[  679.760433]  ? ktime_get_coarse_real_ts64+0xf0/0x2b0
[  679.765534]  ? lockdep_hardirqs_on+0x415/0x5d0
[  679.770110]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.775658]  ? timespec64_trunc+0xf0/0x180
[  679.779912]  __d_alloc+0x2e/0x9c0
[  679.783368]  ? ktime_get_coarse_real_ts64+0x1ba/0x2b0
[  679.788561]  d_alloc_pseudo+0x1e/0x70
[  679.792355]  alloc_file_pseudo+0xe2/0x280
[  679.796510]  ? __lockdep_init_map+0x10c/0x5b0
[  679.801018]  ? alloc_file+0x4d0/0x4d0
[  679.804828]  ? lockdep_annotate_inode_mutex_key+0x5b/0x70
[  679.810373]  ? kasan_check_write+0x14/0x20
[  679.814626]  __shmem_file_setup.part.0+0x108/0x2b0
[  679.819587]  shmem_file_setup+0x66/0x90
[  679.823564]  __x64_sys_memfd_create+0x2a2/0x470
[  679.828228]  ? memfd_fcntl+0x1750/0x1750
[  679.832283]  ? do_syscall_64+0x26/0x620
[  679.836264]  ? lockdep_hardirqs_on+0x415/0x5d0
[  679.840861]  ? trace_hardirqs_on+0x67/0x220
[  679.845200]  do_syscall_64+0xfd/0x620
[  679.849006]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  679.854196] RIP: 0033:0x45b349
17:36:58 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1a, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  679.857404] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  679.876418] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  679.884229] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  679.891496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
[  679.899393] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  679.906674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  679.913958] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000004
[  681.253837] Bluetooth: hci0: command 0x1003 tx timeout
[  681.259225] Bluetooth: hci0: sending frame failed (-49)
[  683.343932] Bluetooth: hci0: command 0x1001 tx timeout
[  683.349435] Bluetooth: hci0: sending frame failed (-49)
[  685.414313] Bluetooth: hci0: command 0x1009 tx timeout
17:37:07 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
eventfd2(0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:07 executing program 1 (fault-call:0 fault-nth:5):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:07 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1b, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:37:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1c, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  689.286144] FAULT_INJECTION: forcing a failure.
[  689.286144] name failslab, interval 1, probability 0, space 0, times 0
[  689.307689] xt_HMARK: spi-set and port-set can't be combined
[  689.313465] xt_HMARK: spi-set and port-set can't be combined
[  689.364701] CPU: 0 PID: 12686 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  689.372549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  689.381916] Call Trace:
[  689.384524]  dump_stack+0x197/0x210
[  689.388177]  should_fail.cold+0xa/0x1b
[  689.392086]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  689.397208]  ? lock_downgrade+0x880/0x880
[  689.401380]  __should_failslab+0x121/0x190
[  689.405661]  should_failslab+0x9/0x14
[  689.409474]  kmem_cache_alloc+0x2ae/0x700
[  689.413649]  ? rcu_read_lock_sched_held+0x110/0x130
[  689.418684]  selinux_file_alloc_security+0xb4/0x190
[  689.423724]  security_file_alloc+0x63/0xa0
[  689.427977]  __alloc_file+0xcf/0x330
[  689.431709]  alloc_empty_file+0x72/0x170
[  689.435793]  alloc_file+0x5e/0x4d0
[  689.439344]  alloc_file_pseudo+0x189/0x280
[  689.443588]  ? alloc_file+0x4d0/0x4d0
[  689.447426]  ? lockdep_annotate_inode_mutex_key+0x5b/0x70
[  689.453060]  ? kasan_check_write+0x14/0x20
[  689.457303]  __shmem_file_setup.part.0+0x108/0x2b0
[  689.462240]  shmem_file_setup+0x66/0x90
[  689.466233]  __x64_sys_memfd_create+0x2a2/0x470
[  689.470923]  ? memfd_fcntl+0x1750/0x1750
[  689.475001]  ? do_syscall_64+0x26/0x620
[  689.478984]  ? lockdep_hardirqs_on+0x415/0x5d0
[  689.483595]  ? trace_hardirqs_on+0x67/0x220
[  689.488031]  do_syscall_64+0xfd/0x620
[  689.491862]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  689.497065] RIP: 0033:0x45b349
17:37:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1d, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:07 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x1e, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  689.500266] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  689.519411] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f
[  689.527309] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b349
[  689.534949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8
[  689.542240] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001
[  689.549523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  689.556886] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000005
17:37:08 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x21, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  689.635545] xt_HMARK: spi-set and port-set can't be combined
17:37:08 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  689.795505] xt_HMARK: spi-set and port-set can't be combined
[  691.414098] Bluetooth: hci0: command 0x1003 tx timeout
[  691.419552] Bluetooth: hci0: sending frame failed (-49)
[  693.494005] Bluetooth: hci0: command 0x1001 tx timeout
[  693.499402] Bluetooth: hci0: sending frame failed (-49)
[  695.573969] Bluetooth: hci0: command 0x1009 tx timeout
17:37:17 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:17 executing program 1 (fault-call:0 fault-nth:6):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:17 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x22, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:17 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000), 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  699.543026] xt_HMARK: spi-set and port-set can't be combined
[  699.556996] FAULT_INJECTION: forcing a failure.
[  699.556996] name failslab, interval 1, probability 0, space 0, times 0
[  699.557302] xt_HMARK: spi-set and port-set can't be combined
17:37:17 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x23, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  699.597758] CPU: 0 PID: 12733 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  699.605610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  699.615111] Call Trace:
[  699.617726]  dump_stack+0x197/0x210
[  699.621381]  should_fail.cold+0xa/0x1b
[  699.625295]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  699.630416]  ? lock_downgrade+0x880/0x880
[  699.634594]  __should_failslab+0x121/0x190
[  699.638850]  should_failslab+0x9/0x14
[  699.642671]  kmem_cache_alloc+0x2ae/0x700
[  699.646837]  ? notify_change+0x6d5/0xfb0
[  699.650910]  ? do_sys_ftruncate+0x41e/0x550
[  699.655251]  getname_flags+0xd6/0x5b0
[  699.659071]  getname+0x1a/0x20
[  699.662280]  do_sys_open+0x2c9/0x550
[  699.666017]  ? filp_open+0x80/0x80
[  699.669611]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  699.674490]  ? do_syscall_64+0x26/0x620
[  699.678487]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  699.683866]  ? do_syscall_64+0x26/0x620
[  699.687860]  __x64_sys_open+0x7e/0xc0
[  699.691682]  do_syscall_64+0xfd/0x620
[  699.695498]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  699.700699] RIP: 0033:0x4150e1
[  699.703903] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  699.722919] RSP: 002b:00007f7852458a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  699.730645] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 00000000004150e1
[  699.737932] RDX: 00007f7852458b0a RSI: 0000000000000002 RDI: 00007f7852458b00
17:37:18 executing program 1 (fault-call:0 fault-nth:7):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  699.745208] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  699.752491] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003
[  699.759775] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000006
17:37:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000), 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  699.859252] FAULT_INJECTION: forcing a failure.
[  699.859252] name failslab, interval 1, probability 0, space 0, times 0
[  699.890350] xt_HMARK: spi-set and port-set can't be combined
[  699.904076] CPU: 1 PID: 12750 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  699.911916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  699.921277] Call Trace:
[  699.923885]  dump_stack+0x197/0x210
[  699.927538]  should_fail.cold+0xa/0x1b
[  699.931444]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  699.936572]  ? lock_downgrade+0x880/0x880
[  699.940750]  __should_failslab+0x121/0x190
[  699.945009]  should_failslab+0x9/0x14
[  699.948826]  kmem_cache_alloc+0x2ae/0x700
[  699.952981]  ? notify_change+0x6d5/0xfb0
[  699.957051]  ? do_sys_ftruncate+0x41e/0x550
[  699.961379]  getname_flags+0xd6/0x5b0
[  699.965181]  getname+0x1a/0x20
[  699.968371]  do_sys_open+0x2c9/0x550
[  699.972079]  ? filp_open+0x80/0x80
[  699.975626]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  699.980394]  ? do_syscall_64+0x26/0x620
[  699.984379]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  699.989748]  ? do_syscall_64+0x26/0x620
[  699.993791]  __x64_sys_open+0x7e/0xc0
[  699.997621]  do_syscall_64+0xfd/0x620
[  700.001433]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.006618] RIP: 0033:0x4150e1
[  700.009806] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  700.028703] RSP: 002b:00007f7852458a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  700.036414] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 00000000004150e1
[  700.043699] RDX: 00007f7852458b0a RSI: 0000000000000002 RDI: 00007f7852458b00
[  700.050968] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
17:37:18 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000), 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:18 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x24, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  700.058241] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003
[  700.065516] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000007
17:37:18 executing program 1 (fault-call:0 fault-nth:8):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  700.187983] xt_HMARK: spi-set and port-set can't be combined
[  700.286556] FAULT_INJECTION: forcing a failure.
[  700.286556] name failslab, interval 1, probability 0, space 0, times 0
[  700.302498] CPU: 0 PID: 12764 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  700.310331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  700.319695] Call Trace:
[  700.322314]  dump_stack+0x197/0x210
[  700.325977]  should_fail.cold+0xa/0x1b
[  700.329897]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  700.335036]  ? lock_downgrade+0x880/0x880
[  700.339316]  __should_failslab+0x121/0x190
[  700.343573]  should_failslab+0x9/0x14
[  700.347397]  kmem_cache_alloc+0x2ae/0x700
[  700.351566]  ? __save_stack_trace+0x99/0x100
[  700.355993]  __alloc_file+0x27/0x330
[  700.359731]  alloc_empty_file+0x72/0x170
[  700.363810]  path_openat+0xef/0x45e0
[  700.367545]  ? __lock_acquire+0x6ee/0x49c0
[  700.371789]  ? getname+0x1a/0x20
[  700.375164]  ? do_sys_open+0x2c9/0x550
[  700.379070]  ? __x64_sys_open+0x7e/0xc0
[  700.383061]  ? do_syscall_64+0xfd/0x620
[  700.387048]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.392440]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  700.397121]  ? __lock_is_held+0xb6/0x140
[  700.401208]  ? __alloc_fd+0x44d/0x560
[  700.405029]  do_filp_open+0x1a1/0x280
[  700.408842]  ? may_open_dev+0x100/0x100
[  700.412840]  ? lock_downgrade+0x880/0x880
[  700.417006]  ? do_raw_spin_unlock+0x181/0x270
[  700.421518]  ? _raw_spin_unlock+0x2d/0x50
[  700.425679]  ? __alloc_fd+0x44d/0x560
[  700.429506]  do_sys_open+0x3fe/0x550
[  700.433242]  ? filp_open+0x80/0x80
[  700.436805]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  700.441579]  ? do_syscall_64+0x26/0x620
[  700.445568]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.450947]  ? do_syscall_64+0x26/0x620
[  700.454946]  __x64_sys_open+0x7e/0xc0
[  700.458776]  do_syscall_64+0xfd/0x620
[  700.462584]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  700.467791] RIP: 0033:0x4150e1
[  700.470989] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  700.489885] RSP: 002b:00007f7852458a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  700.498037] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 00000000004150e1
[  700.505459] RDX: 00007f7852458b0a RSI: 0000000000000002 RDI: 00007f7852458b00
[  700.512924] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  700.520211] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003
[  700.528571] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000008
[  701.813973] Bluetooth: hci0: command 0x1003 tx timeout
[  701.820307] Bluetooth: hci0: sending frame failed (-49)
[  703.893868] Bluetooth: hci0: command 0x1001 tx timeout
[  703.900219] Bluetooth: hci0: sending frame failed (-49)
[  705.973959] Bluetooth: hci0: command 0x1009 tx timeout
17:37:28 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x0, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:28 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:28 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x25, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:28 executing program 1 (fault-call:0 fault-nth:9):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  710.417972] FAULT_INJECTION: forcing a failure.
[  710.417972] name failslab, interval 1, probability 0, space 0, times 0
[  710.426359] xt_HMARK: spi-set and port-set can't be combined
[  710.457845] xt_HMARK: spi-set and port-set can't be combined
17:37:28 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x26, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:28 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x0, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  710.488047] CPU: 0 PID: 12777 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  710.496321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  710.505683] Call Trace:
[  710.508290]  dump_stack+0x197/0x210
[  710.511947]  should_fail.cold+0xa/0x1b
[  710.515867]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  710.520993]  ? lock_downgrade+0x880/0x880
[  710.525172]  __should_failslab+0x121/0x190
[  710.529424]  should_failslab+0x9/0x14
[  710.533245]  kmem_cache_alloc+0x2ae/0x700
[  710.537684]  ? rcu_read_lock_sched_held+0x110/0x130
[  710.542724]  selinux_file_alloc_security+0xb4/0x190
[  710.547762]  security_file_alloc+0x63/0xa0
[  710.552023]  __alloc_file+0xcf/0x330
[  710.555759]  alloc_empty_file+0x72/0x170
[  710.559842]  path_openat+0xef/0x45e0
[  710.563579]  ? __lock_acquire+0x6ee/0x49c0
[  710.567818]  ? getname+0x1a/0x20
[  710.571200]  ? do_sys_open+0x2c9/0x550
[  710.575100]  ? __x64_sys_open+0x7e/0xc0
[  710.579088]  ? do_syscall_64+0xfd/0x620
[  710.583081]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  710.586675] xt_HMARK: spi-set and port-set can't be combined
[  710.588470]  ? path_lookupat.isra.0+0x8d0/0x8d0
[  710.588487]  ? __lock_is_held+0xb6/0x140
[  710.588510]  ? __alloc_fd+0x44d/0x560
[  710.607801]  do_filp_open+0x1a1/0x280
[  710.611614]  ? may_open_dev+0x100/0x100
[  710.615611]  ? lock_downgrade+0x880/0x880
[  710.619777]  ? do_raw_spin_unlock+0x181/0x270
[  710.624289]  ? _raw_spin_unlock+0x2d/0x50
[  710.628450]  ? __alloc_fd+0x44d/0x560
[  710.632279]  do_sys_open+0x3fe/0x550
[  710.636706]  ? filp_open+0x80/0x80
[  710.640268]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  710.645050]  ? do_syscall_64+0x26/0x620
[  710.649047]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  710.654421]  ? do_syscall_64+0x26/0x620
[  710.658415]  __x64_sys_open+0x7e/0xc0
[  710.662235]  do_syscall_64+0xfd/0x620
[  710.666058]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  710.671256] RIP: 0033:0x4150e1
[  710.674469] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  710.693389] RSP: 002b:00007f7852458a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002
[  710.701117] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 00000000004150e1
[  710.708392] RDX: 00007f7852458b0a RSI: 0000000000000002 RDI: 00007f7852458b00
[  710.715678] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  710.722959] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003
[  710.730246] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000009
17:37:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x0, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:29 executing program 1 (fault-call:0 fault-nth:10):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  710.820040] xt_HMARK: spi-set and port-set can't be combined
17:37:29 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x27, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6", 0x26}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  710.935345] FAULT_INJECTION: forcing a failure.
[  710.935345] name failslab, interval 1, probability 0, space 0, times 0
[  710.955070] CPU: 0 PID: 12803 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  710.962907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  710.972277] Call Trace:
[  710.974907]  dump_stack+0x197/0x210
[  710.978550]  should_fail.cold+0xa/0x1b
[  710.982456]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  710.987573]  ? lock_downgrade+0x880/0x880
[  710.991747]  __should_failslab+0x121/0x190
[  710.995993]  should_failslab+0x9/0x14
[  710.999798]  kmem_cache_alloc_trace+0x2cc/0x760
[  711.004477]  ? __lockdep_init_map+0x10c/0x5b0
[  711.009074]  ? loop_info64_to_compat+0x6d0/0x6d0
[  711.013852]  __kthread_create_on_node+0xf2/0x460
[  711.018620]  ? lock_acquire+0x16f/0x3f0
[  711.022609]  ? __kthread_parkme+0x1b0/0x1b0
[  711.027557]  ? lo_ioctl+0x1c4/0x20e0
[  711.031388]  ? lock_downgrade+0x880/0x880
[  711.035563]  ? mutex_trylock+0x1e0/0x1e0
[  711.039638]  ? loop_info64_to_compat+0x6d0/0x6d0
[  711.044407]  kthread_create_on_node+0xbb/0xf0
[  711.049028]  ? __kthread_create_on_node+0x460/0x460
[  711.054065]  ? __lockdep_init_map+0x10c/0x5b0
[  711.058580]  ? __lockdep_init_map+0x10c/0x5b0
[  711.063097]  lo_ioctl+0xaf2/0x20e0
[  711.066664]  ? lo_rw_aio+0x1470/0x1470
[  711.070664]  blkdev_ioctl+0xc38/0x1ab6
[  711.074599]  ? blkpg_ioctl+0xa90/0xa90
[  711.078495]  ? find_held_lock+0x35/0x130
[  711.082569]  ? debug_check_no_obj_freed+0x200/0x464
[  711.087601]  ? __fget+0x340/0x540
[  711.091085]  block_ioctl+0xee/0x130
[  711.094722]  ? blkdev_fallocate+0x410/0x410
[  711.099061]  do_vfs_ioctl+0xd5f/0x1380
[  711.102968]  ? selinux_file_ioctl+0x46f/0x5e0
[  711.107572]  ? selinux_file_ioctl+0x125/0x5e0
[  711.112093]  ? ioctl_preallocate+0x210/0x210
[  711.116520]  ? selinux_file_mprotect+0x620/0x620
[  711.121294]  ? iterate_fd+0x360/0x360
[  711.125106]  ? do_sys_open+0x31d/0x550
[  711.129011]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
17:37:29 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  711.134571]  ? security_file_ioctl+0x8d/0xc0
[  711.139020]  ksys_ioctl+0xab/0xd0
[  711.142496]  __x64_sys_ioctl+0x73/0xb0
[  711.146400]  do_syscall_64+0xfd/0x620
[  711.150224]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  711.155442] RIP: 0033:0x45b1b7
[  711.158643] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  711.177564] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  711.185280] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  711.192548] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  711.199855] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  711.207115] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  711.214400] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000a
[  711.292048] xt_HMARK: spi-set and port-set can't be combined
[  711.349722] xt_HMARK: spi-set and port-set can't be combined
[  712.533928] Bluetooth: hci0: command 0x1003 tx timeout
[  712.539336] Bluetooth: hci0: sending frame failed (-49)
[  714.613875] Bluetooth: hci0: command 0x1001 tx timeout
[  714.619321] Bluetooth: hci0: sending frame failed (-49)
[  716.693979] Bluetooth: hci0: command 0x1009 tx timeout
17:37:38 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:38 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x28, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:38 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:37:38 executing program 1 (fault-call:0 fault-nth:11):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:38 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:38 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6", 0x26}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  720.662182] xt_HMARK: spi-set and port-set can't be combined
[  720.670998] xt_HMARK: spi-set and port-set can't be combined
[  720.677416] FAULT_INJECTION: forcing a failure.
[  720.677416] name failslab, interval 1, probability 0, space 0, times 0
[  720.715514] CPU: 0 PID: 12828 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  720.723442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  720.732809] Call Trace:
[  720.735420]  dump_stack+0x197/0x210
[  720.739077]  should_fail.cold+0xa/0x1b
[  720.742987]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  720.748111]  ? lock_downgrade+0x880/0x880
[  720.752295]  __should_failslab+0x121/0x190
[  720.756549]  should_failslab+0x9/0x14
[  720.760360]  kmem_cache_alloc+0x2ae/0x700
[  720.764526]  ? __lock_acquire+0x6ee/0x49c0
[  720.768779]  __kernfs_new_node+0xef/0x6f0
[  720.772948]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  720.777723]  ? __lock_acquire+0x6ee/0x49c0
[  720.781984]  ? __lock_is_held+0xb6/0x140
[  720.786075]  kernfs_new_node+0x99/0x130
[  720.790070]  kernfs_create_dir_ns+0x52/0x160
[  720.794504]  internal_create_group+0x1cb/0xc30
[  720.799092]  ? bd_set_size+0x89/0xb0
[  720.802837]  ? remove_files.isra.0+0x190/0x190
[  720.807447]  sysfs_create_group+0x20/0x30
[  720.811615]  lo_ioctl+0xf8f/0x20e0
[  720.815192]  ? lo_rw_aio+0x1470/0x1470
[  720.819099]  blkdev_ioctl+0xc38/0x1ab6
[  720.822995]  ? blkpg_ioctl+0xa90/0xa90
[  720.826899]  ? find_held_lock+0x35/0x130
[  720.830980]  ? debug_check_no_obj_freed+0x200/0x464
[  720.836023]  ? __fget+0x340/0x540
[  720.839498]  block_ioctl+0xee/0x130
[  720.843139]  ? blkdev_fallocate+0x410/0x410
[  720.847483]  do_vfs_ioctl+0xd5f/0x1380
[  720.851388]  ? selinux_file_ioctl+0x46f/0x5e0
[  720.855894]  ? selinux_file_ioctl+0x125/0x5e0
[  720.860408]  ? ioctl_preallocate+0x210/0x210
[  720.864828]  ? selinux_file_mprotect+0x620/0x620
[  720.869609]  ? iterate_fd+0x360/0x360
[  720.873430]  ? do_sys_open+0x31d/0x550
[  720.877335]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  720.882883]  ? security_file_ioctl+0x8d/0xc0
[  720.887315]  ksys_ioctl+0xab/0xd0
[  720.890791]  __x64_sys_ioctl+0x73/0xb0
[  720.894697]  do_syscall_64+0xfd/0x620
[  720.898599]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  720.903794] RIP: 0033:0x45b1b7
17:37:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:39 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x29, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  720.907002] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  720.925921] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  720.933649] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  720.940931] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  720.948304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  720.955583] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  720.962865] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000b
17:37:39 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6", 0x26}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:39 executing program 1 (fault-call:0 fault-nth:12):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  721.089297] xt_HMARK: spi-set and port-set can't be combined
[  721.150096] xt_HMARK: spi-set and port-set can't be combined
[  721.167517] FAULT_INJECTION: forcing a failure.
[  721.167517] name failslab, interval 1, probability 0, space 0, times 0
[  721.179304] CPU: 0 PID: 12854 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  721.187120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  721.196480] Call Trace:
[  721.199086]  dump_stack+0x197/0x210
[  721.202740]  should_fail.cold+0xa/0x1b
[  721.206644]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  721.211852]  ? lock_downgrade+0x880/0x880
[  721.216031]  __should_failslab+0x121/0x190
[  721.220281]  should_failslab+0x9/0x14
[  721.224098]  kmem_cache_alloc+0x2ae/0x700
[  721.228349]  ? find_held_lock+0x35/0x130
[  721.232430]  ? kernfs_activate+0x192/0x1f0
[  721.236683]  __kernfs_new_node+0xef/0x6f0
[  721.240839]  ? lock_downgrade+0x880/0x880
[  721.244994]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  721.249772]  ? lock_downgrade+0x880/0x880
[  721.253933]  ? kasan_check_write+0x14/0x20
[  721.258179]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  721.263054]  ? wait_for_completion+0x440/0x440
[  721.267670]  kernfs_new_node+0x99/0x130
[  721.271672]  __kernfs_create_file+0x51/0x33b
[  721.276100]  sysfs_add_file_mode_ns+0x222/0x560
[  721.280796]  internal_create_group+0x383/0xc30
[  721.285387]  ? bd_set_size+0x89/0xb0
[  721.289119]  ? remove_files.isra.0+0x190/0x190
[  721.293727]  sysfs_create_group+0x20/0x30
[  721.297887]  lo_ioctl+0xf8f/0x20e0
[  721.301453]  ? lo_rw_aio+0x1470/0x1470
[  721.305358]  blkdev_ioctl+0xc38/0x1ab6
[  721.309273]  ? blkpg_ioctl+0xa90/0xa90
[  721.313252]  ? find_held_lock+0x35/0x130
[  721.317321]  ? debug_check_no_obj_freed+0x200/0x464
[  721.322352]  ? __fget+0x340/0x540
[  721.325837]  block_ioctl+0xee/0x130
[  721.329474]  ? blkdev_fallocate+0x410/0x410
[  721.333818]  do_vfs_ioctl+0xd5f/0x1380
[  721.337718]  ? selinux_file_ioctl+0x46f/0x5e0
[  721.342222]  ? selinux_file_ioctl+0x125/0x5e0
[  721.346730]  ? ioctl_preallocate+0x210/0x210
[  721.351145]  ? selinux_file_mprotect+0x620/0x620
[  721.355925]  ? iterate_fd+0x360/0x360
[  721.359743]  ? do_sys_open+0x31d/0x550
[  721.363652]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  721.369302]  ? security_file_ioctl+0x8d/0xc0
[  721.373723]  ksys_ioctl+0xab/0xd0
[  721.377179]  __x64_sys_ioctl+0x73/0xb0
[  721.381057]  do_syscall_64+0xfd/0x620
[  721.384872]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  721.390055] RIP: 0033:0x45b1b7
[  721.393237] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  721.412130] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  721.419938] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  721.427204] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  721.434465] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  721.441732] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  721.449007] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000c
17:37:39 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2a, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:39 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  721.597842] xt_HMARK: spi-set and port-set can't be combined
[  722.773887] Bluetooth: hci0: command 0x1003 tx timeout
[  722.779372] Bluetooth: hci0: sending frame failed (-49)
[  724.853980] Bluetooth: hci0: command 0x1001 tx timeout
[  724.859417] Bluetooth: hci0: sending frame failed (-49)
[  726.933897] Bluetooth: hci0: command 0x1009 tx timeout
17:37:49 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:37:49 executing program 1 (fault-call:0 fault-nth:13):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39", 0x39}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:49 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2b, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  730.904898] xt_HMARK: spi-set and port-set can't be combined
[  730.911575] xt_HMARK: spi-set and port-set can't be combined
[  730.923900] FAULT_INJECTION: forcing a failure.
[  730.923900] name failslab, interval 1, probability 0, space 0, times 0
[  730.943132] CPU: 0 PID: 12876 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
17:37:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  730.950975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  730.960434] Call Trace:
[  730.963046]  dump_stack+0x197/0x210
[  730.966700]  should_fail.cold+0xa/0x1b
[  730.970600]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  730.975751]  ? lock_downgrade+0x880/0x880
[  730.979916]  __should_failslab+0x121/0x190
[  730.984169]  should_failslab+0x9/0x14
[  730.987981]  kmem_cache_alloc+0x2ae/0x700
[  730.992178]  ? find_held_lock+0x35/0x130
[  730.996234]  ? kernfs_activate+0x192/0x1f0
[  731.000465]  __kernfs_new_node+0xef/0x6f0
[  731.004604]  ? lock_downgrade+0x880/0x880
[  731.008749]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  731.013505]  ? lock_downgrade+0x880/0x880
[  731.017655]  ? kasan_check_write+0x14/0x20
[  731.021894]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  731.026749]  ? wait_for_completion+0x440/0x440
[  731.031331]  kernfs_new_node+0x99/0x130
[  731.035315]  __kernfs_create_file+0x51/0x33b
[  731.039717]  sysfs_add_file_mode_ns+0x222/0x560
[  731.044426]  internal_create_group+0x383/0xc30
[  731.049043]  ? bd_set_size+0x89/0xb0
[  731.052756]  ? remove_files.isra.0+0x190/0x190
[  731.057337]  sysfs_create_group+0x20/0x30
[  731.061614]  lo_ioctl+0xf8f/0x20e0
[  731.065201]  ? lo_rw_aio+0x1470/0x1470
[  731.069106]  blkdev_ioctl+0xc38/0x1ab6
[  731.072997]  ? blkpg_ioctl+0xa90/0xa90
[  731.076887]  ? find_held_lock+0x35/0x130
[  731.080951]  ? debug_check_no_obj_freed+0x200/0x464
[  731.085986]  ? __fget+0x340/0x540
[  731.089442]  block_ioctl+0xee/0x130
[  731.093058]  ? blkdev_fallocate+0x410/0x410
[  731.097426]  do_vfs_ioctl+0xd5f/0x1380
[  731.101311]  ? selinux_file_ioctl+0x46f/0x5e0
[  731.105796]  ? selinux_file_ioctl+0x125/0x5e0
[  731.110361]  ? ioctl_preallocate+0x210/0x210
[  731.114768]  ? selinux_file_mprotect+0x620/0x620
[  731.119524]  ? iterate_fd+0x360/0x360
[  731.123353]  ? do_sys_open+0x31d/0x550
[  731.127312]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  731.132857]  ? security_file_ioctl+0x8d/0xc0
[  731.137268]  ksys_ioctl+0xab/0xd0
[  731.140714]  __x64_sys_ioctl+0x73/0xb0
[  731.144605]  do_syscall_64+0xfd/0x620
[  731.148411]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  731.153599] RIP: 0033:0x45b1b7
[  731.156791] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  731.175689] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.183452] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  731.190714] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  731.198001] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  731.205263] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  731.212529] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000d
17:37:49 executing program 1 (fault-call:0 fault-nth:14):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  731.324145] xt_HMARK: spi-set and port-set can't be combined
17:37:49 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  731.427371] FAULT_INJECTION: forcing a failure.
[  731.427371] name failslab, interval 1, probability 0, space 0, times 0
[  731.472391] CPU: 1 PID: 12898 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  731.480234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  731.489596] Call Trace:
[  731.492206]  dump_stack+0x197/0x210
[  731.495856]  should_fail.cold+0xa/0x1b
[  731.499764]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  731.504891]  ? lock_downgrade+0x880/0x880
[  731.509063]  __should_failslab+0x121/0x190
[  731.513310]  should_failslab+0x9/0x14
[  731.517120]  kmem_cache_alloc+0x2ae/0x700
[  731.521279]  ? lock_downgrade+0x880/0x880
[  731.525525]  __kernfs_new_node+0xef/0x6f0
[  731.529666]  ? kasan_check_write+0x14/0x20
[  731.533891]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  731.539282]  ? wait_for_completion+0x440/0x440
[  731.543894]  ? mutex_unlock+0xd/0x10
[  731.548143]  ? kernfs_activate+0x192/0x1f0
[  731.552416]  kernfs_new_node+0x99/0x130
[  731.556383]  __kernfs_create_file+0x51/0x33b
[  731.560792]  sysfs_add_file_mode_ns+0x222/0x560
[  731.565503]  internal_create_group+0x383/0xc30
[  731.570078]  ? bd_set_size+0x89/0xb0
[  731.573802]  ? remove_files.isra.0+0x190/0x190
[  731.578391]  sysfs_create_group+0x20/0x30
[  731.582532]  lo_ioctl+0xf8f/0x20e0
[  731.586061]  ? lo_rw_aio+0x1470/0x1470
[  731.589946]  blkdev_ioctl+0xc38/0x1ab6
[  731.593823]  ? blkpg_ioctl+0xa90/0xa90
[  731.597708]  ? find_held_lock+0x35/0x130
[  731.601770]  ? debug_check_no_obj_freed+0x200/0x464
[  731.606793]  ? __fget+0x340/0x540
[  731.610273]  block_ioctl+0xee/0x130
[  731.613909]  ? blkdev_fallocate+0x410/0x410
[  731.618384]  do_vfs_ioctl+0xd5f/0x1380
[  731.622264]  ? selinux_file_ioctl+0x46f/0x5e0
[  731.626747]  ? selinux_file_ioctl+0x125/0x5e0
[  731.631233]  ? ioctl_preallocate+0x210/0x210
[  731.635630]  ? selinux_file_mprotect+0x620/0x620
[  731.640410]  ? iterate_fd+0x360/0x360
[  731.644222]  ? do_sys_open+0x31d/0x550
[  731.648104]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  731.653891]  ? security_file_ioctl+0x8d/0xc0
[  731.658287]  ksys_ioctl+0xab/0xd0
[  731.661740]  __x64_sys_ioctl+0x73/0xb0
[  731.665642]  do_syscall_64+0xfd/0x620
[  731.669445]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  731.674642] RIP: 0033:0x45b1b7
[  731.677841] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  731.696757] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  731.704483] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  731.711752] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  731.719121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  731.726438] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  731.733694] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000e
17:37:50 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2c, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:50 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39", 0x39}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:50 executing program 1 (fault-call:0 fault-nth:15):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  731.798660] xt_HMARK: spi-set and port-set can't be combined
[  731.913148] xt_HMARK: spi-set and port-set can't be combined
[  731.940993] FAULT_INJECTION: forcing a failure.
[  731.940993] name failslab, interval 1, probability 0, space 0, times 0
[  731.952785] CPU: 0 PID: 12915 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  731.960625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  731.969999] Call Trace:
[  731.972649]  dump_stack+0x197/0x210
[  731.976309]  should_fail.cold+0xa/0x1b
[  731.980232]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  731.985407]  ? lock_downgrade+0x880/0x880
[  731.989599]  __should_failslab+0x121/0x190
[  731.993860]  should_failslab+0x9/0x14
[  731.997977]  kmem_cache_alloc+0x2ae/0x700
[  732.002160]  ? lock_downgrade+0x880/0x880
[  732.006332]  __kernfs_new_node+0xef/0x6f0
[  732.010499]  ? kasan_check_write+0x14/0x20
[  732.015059]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  732.019835]  ? wait_for_completion+0x440/0x440
[  732.024569]  ? mutex_unlock+0xd/0x10
[  732.028298]  ? kernfs_activate+0x192/0x1f0
[  732.032584]  kernfs_new_node+0x99/0x130
[  732.036578]  __kernfs_create_file+0x51/0x33b
[  732.041027]  sysfs_add_file_mode_ns+0x222/0x560
[  732.045724]  internal_create_group+0x383/0xc30
[  732.050318]  ? bd_set_size+0x89/0xb0
[  732.054053]  ? remove_files.isra.0+0x190/0x190
[  732.058678]  sysfs_create_group+0x20/0x30
[  732.062859]  lo_ioctl+0xf8f/0x20e0
[  732.066424]  ? lo_rw_aio+0x1470/0x1470
[  732.070333]  blkdev_ioctl+0xc38/0x1ab6
[  732.074237]  ? blkpg_ioctl+0xa90/0xa90
[  732.078134]  ? find_held_lock+0x35/0x130
[  732.082218]  ? debug_check_no_obj_freed+0x200/0x464
[  732.087253]  ? __fget+0x340/0x540
[  732.090727]  block_ioctl+0xee/0x130
[  732.094374]  ? blkdev_fallocate+0x410/0x410
[  732.098712]  do_vfs_ioctl+0xd5f/0x1380
[  732.102606]  ? selinux_file_ioctl+0x46f/0x5e0
[  732.107111]  ? selinux_file_ioctl+0x125/0x5e0
[  732.111625]  ? ioctl_preallocate+0x210/0x210
[  732.116052]  ? selinux_file_mprotect+0x620/0x620
[  732.120831]  ? iterate_fd+0x360/0x360
[  732.124643]  ? do_sys_open+0x31d/0x550
[  732.128550]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  732.134101]  ? security_file_ioctl+0x8d/0xc0
[  732.138549]  ksys_ioctl+0xab/0xd0
[  732.142084]  __x64_sys_ioctl+0x73/0xb0
[  732.145983]  do_syscall_64+0xfd/0x620
[  732.150049]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  732.155240] RIP: 0033:0x45b1b7
[  732.158437] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  732.177358] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.185098] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  732.192414] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  732.199675] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  732.207510] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  732.214791] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000000f
[  733.013839] Bluetooth: hci0: command 0x1003 tx timeout
[  733.019279] Bluetooth: hci0: sending frame failed (-49)
[  735.093868] Bluetooth: hci0: command 0x1001 tx timeout
[  735.099318] Bluetooth: hci0: sending frame failed (-49)
[  737.173935] Bluetooth: hci0: command 0x1009 tx timeout
17:37:59 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:37:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:37:59 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2d, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:37:59 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:37:59 executing program 1 (fault-call:0 fault-nth:16):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:37:59 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39", 0x39}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  741.144889] FAULT_INJECTION: forcing a failure.
[  741.144889] name failslab, interval 1, probability 0, space 0, times 0
[  741.149797] xt_HMARK: spi-set and port-set can't be combined
[  741.156740] xt_HMARK: spi-set and port-set can't be combined
17:37:59 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  741.188625] CPU: 0 PID: 12938 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  741.196466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  741.205829] Call Trace:
[  741.208431]  dump_stack+0x197/0x210
[  741.212089]  should_fail.cold+0xa/0x1b
[  741.216117]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  741.221246]  ? lock_downgrade+0x880/0x880
[  741.225422]  __should_failslab+0x121/0x190
[  741.229674]  should_failslab+0x9/0x14
[  741.233664]  kmem_cache_alloc+0x2ae/0x700
[  741.237930]  ? lock_downgrade+0x880/0x880
[  741.242097]  __kernfs_new_node+0xef/0x6f0
[  741.246262]  ? kasan_check_write+0x14/0x20
[  741.250516]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  741.255286]  ? wait_for_completion+0x440/0x440
[  741.259927]  ? mutex_unlock+0xd/0x10
[  741.263651]  ? kernfs_activate+0x192/0x1f0
[  741.267895]  kernfs_new_node+0x99/0x130
[  741.271878]  __kernfs_create_file+0x51/0x33b
[  741.276733]  sysfs_add_file_mode_ns+0x222/0x560
[  741.281430]  internal_create_group+0x383/0xc30
[  741.286020]  ? bd_set_size+0x89/0xb0
[  741.289764]  ? remove_files.isra.0+0x190/0x190
[  741.294390]  sysfs_create_group+0x20/0x30
[  741.298558]  lo_ioctl+0xf8f/0x20e0
[  741.302096]  ? lo_rw_aio+0x1470/0x1470
[  741.306000]  blkdev_ioctl+0xc38/0x1ab6
[  741.309905]  ? blkpg_ioctl+0xa90/0xa90
[  741.313807]  ? find_held_lock+0x35/0x130
[  741.317874]  ? debug_check_no_obj_freed+0x200/0x464
[  741.322905]  ? __fget+0x340/0x540
[  741.326378]  block_ioctl+0xee/0x130
[  741.330022]  ? blkdev_fallocate+0x410/0x410
[  741.334351]  do_vfs_ioctl+0xd5f/0x1380
[  741.338230]  ? selinux_file_ioctl+0x46f/0x5e0
[  741.342717]  ? selinux_file_ioctl+0x125/0x5e0
[  741.347219]  ? ioctl_preallocate+0x210/0x210
[  741.351634]  ? selinux_file_mprotect+0x620/0x620
[  741.356384]  ? iterate_fd+0x360/0x360
[  741.360176]  ? do_sys_open+0x31d/0x550
[  741.364080]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  741.369628]  ? security_file_ioctl+0x8d/0xc0
[  741.374093]  ksys_ioctl+0xab/0xd0
[  741.377538]  __x64_sys_ioctl+0x73/0xb0
[  741.381438]  do_syscall_64+0xfd/0x620
[  741.385265]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  741.390462] RIP: 0033:0x45b1b7
[  741.393653] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  741.412558] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  741.420302] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  741.427577] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
17:37:59 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2e, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  741.434913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  741.442177] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  741.449451] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000010
17:37:59 executing program 1 (fault-call:0 fault-nth:17):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  741.595237] xt_HMARK: spi-set and port-set can't be combined
[  741.653394] FAULT_INJECTION: forcing a failure.
[  741.653394] name failslab, interval 1, probability 0, space 0, times 0
[  741.694970] CPU: 0 PID: 12957 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  741.702813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  741.712181] Call Trace:
[  741.714806]  dump_stack+0x197/0x210
[  741.718498]  should_fail.cold+0xa/0x1b
[  741.723754]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  741.728888]  ? lock_downgrade+0x880/0x880
[  741.733072]  __should_failslab+0x121/0x190
[  741.737359]  should_failslab+0x9/0x14
[  741.741182]  kmem_cache_alloc+0x2ae/0x700
[  741.745422]  ? lock_downgrade+0x880/0x880
[  741.749619]  __kernfs_new_node+0xef/0x6f0
[  741.753800]  ? kasan_check_write+0x14/0x20
[  741.758060]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  741.762981]  ? wait_for_completion+0x440/0x440
[  741.767610]  ? mutex_unlock+0xd/0x10
[  741.771353]  ? kernfs_activate+0x192/0x1f0
[  741.775823]  kernfs_new_node+0x99/0x130
[  741.779845]  __kernfs_create_file+0x51/0x33b
[  741.784543]  sysfs_add_file_mode_ns+0x222/0x560
[  741.789230]  internal_create_group+0x383/0xc30
[  741.793832]  ? bd_set_size+0x89/0xb0
[  741.797560]  ? remove_files.isra.0+0x190/0x190
[  741.802169]  sysfs_create_group+0x20/0x30
[  741.806362]  lo_ioctl+0xf8f/0x20e0
[  741.810379]  ? lo_rw_aio+0x1470/0x1470
[  741.814287]  blkdev_ioctl+0xc38/0x1ab6
[  741.818191]  ? blkpg_ioctl+0xa90/0xa90
[  741.822076]  ? find_held_lock+0x35/0x130
[  741.826145]  ? debug_check_no_obj_freed+0x200/0x464
[  741.831184]  ? __fget+0x340/0x540
[  741.834672]  block_ioctl+0xee/0x130
[  741.838313]  ? blkdev_fallocate+0x410/0x410
[  741.842639]  do_vfs_ioctl+0xd5f/0x1380
[  741.846532]  ? selinux_file_ioctl+0x46f/0x5e0
[  741.851040]  ? selinux_file_ioctl+0x125/0x5e0
[  741.855531]  ? ioctl_preallocate+0x210/0x210
[  741.859929]  ? selinux_file_mprotect+0x620/0x620
[  741.864701]  ? iterate_fd+0x360/0x360
[  741.868518]  ? do_sys_open+0x31d/0x550
[  741.872424]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  741.878087]  ? security_file_ioctl+0x8d/0xc0
[  741.882504]  ksys_ioctl+0xab/0xd0
[  741.885982]  __x64_sys_ioctl+0x73/0xb0
[  741.889883]  do_syscall_64+0xfd/0x620
[  741.893699]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  741.898896] RIP: 0033:0x45b1b7
[  741.902080] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  741.920988] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  741.928829] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  741.936106] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  741.943376] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  741.950740] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  741.958020] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000011
17:38:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:00 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:00 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x2f, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  742.092334] xt_HMARK: spi-set and port-set can't be combined
[  742.140775] xt_HMARK: spi-set and port-set can't be combined
[  743.253815] Bluetooth: hci0: command 0x1003 tx timeout
[  743.259208] Bluetooth: hci0: sending frame failed (-49)
[  745.333830] Bluetooth: hci0: command 0x1001 tx timeout
[  745.339277] Bluetooth: hci0: sending frame failed (-49)
[  747.413818] Bluetooth: hci0: command 0x1009 tx timeout
17:38:09 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

17:38:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:09 executing program 1 (fault-call:0 fault-nth:18):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:38:09 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x30, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:09 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x31, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  751.375721] xt_HMARK: spi-set and port-set can't be combined
[  751.396272] FAULT_INJECTION: forcing a failure.
[  751.396272] name failslab, interval 1, probability 0, space 0, times 0
[  751.415845] xt_HMARK: spi-set and port-set can't be combined
17:38:09 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  751.453587] CPU: 1 PID: 12987 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  751.461431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  751.470801] Call Trace:
[  751.473431]  dump_stack+0x197/0x210
[  751.477090]  should_fail.cold+0xa/0x1b
[  751.481013]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  751.486150]  ? lock_downgrade+0x880/0x880
[  751.490370]  __should_failslab+0x121/0x190
[  751.494630]  should_failslab+0x9/0x14
[  751.498516]  kmem_cache_alloc+0x2ae/0x700
[  751.502679]  ? lock_downgrade+0x880/0x880
[  751.506854]  __kernfs_new_node+0xef/0x6f0
[  751.511037]  ? kasan_check_write+0x14/0x20
[  751.515289]  ? kernfs_dop_revalidate+0x3c0/0x3c0
[  751.520150]  ? wait_for_completion+0x440/0x440
[  751.524801]  ? mutex_unlock+0xd/0x10
[  751.528533]  ? kernfs_activate+0x192/0x1f0
[  751.532781]  kernfs_new_node+0x99/0x130
[  751.536759]  __kernfs_create_file+0x51/0x33b
[  751.541172]  sysfs_add_file_mode_ns+0x222/0x560
[  751.545968]  internal_create_group+0x383/0xc30
[  751.550579]  ? bd_set_size+0x89/0xb0
[  751.554309]  ? remove_files.isra.0+0x190/0x190
[  751.558934]  sysfs_create_group+0x20/0x30
[  751.563092]  lo_ioctl+0xf8f/0x20e0
[  751.566654]  ? lo_rw_aio+0x1470/0x1470
[  751.570552]  blkdev_ioctl+0xc38/0x1ab6
[  751.574452]  ? blkpg_ioctl+0xa90/0xa90
[  751.578369]  ? find_held_lock+0x35/0x130
[  751.582437]  ? debug_check_no_obj_freed+0x200/0x464
[  751.587463]  ? __fget+0x340/0x540
[  751.590930]  block_ioctl+0xee/0x130
[  751.594562]  ? blkdev_fallocate+0x410/0x410
[  751.598888]  do_vfs_ioctl+0xd5f/0x1380
[  751.602766]  ? selinux_file_ioctl+0x46f/0x5e0
[  751.607269]  ? selinux_file_ioctl+0x125/0x5e0
[  751.611765]  ? ioctl_preallocate+0x210/0x210
[  751.616240]  ? selinux_file_mprotect+0x620/0x620
[  751.620993]  ? iterate_fd+0x360/0x360
[  751.624800]  ? do_sys_open+0x31d/0x550
[  751.628713]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  751.634253]  ? security_file_ioctl+0x8d/0xc0
[  751.638673]  ksys_ioctl+0xab/0xd0
[  751.642246]  __x64_sys_ioctl+0x73/0xb0
[  751.646143]  do_syscall_64+0xfd/0x620
[  751.649946]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  751.655122] RIP: 0033:0x45b1b7
[  751.658300] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  751.677282] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  751.685082] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  751.692365] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  751.699630] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  751.706900] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  751.714176] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000012
17:38:10 executing program 1 (fault-call:0 fault-nth:19):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  751.832472] xt_HMARK: spi-set and port-set can't be combined
17:38:10 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x32, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:10 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  751.900574] FAULT_INJECTION: forcing a failure.
[  751.900574] name failslab, interval 1, probability 0, space 0, times 0
[  751.922563] CPU: 1 PID: 13011 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  751.930411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  751.939973] Call Trace:
[  751.942619]  dump_stack+0x197/0x210
[  751.946279]  should_fail.cold+0xa/0x1b
[  751.950201]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  751.956471]  ? lock_downgrade+0x880/0x880
[  751.960648]  __should_failslab+0x121/0x190
[  751.964900]  should_failslab+0x9/0x14
[  751.968720]  kmem_cache_alloc_trace+0x2cc/0x760
[  751.973478]  ? dev_uevent_filter+0xe0/0xe0
[  751.977735]  kobject_uevent_env+0x22c/0x1170
[  751.982180]  kobject_uevent+0x20/0x30
[  751.985998]  lo_ioctl+0x100b/0x20e0
[  751.989653]  ? lo_rw_aio+0x1470/0x1470
[  751.993563]  blkdev_ioctl+0xc38/0x1ab6
[  751.997476]  ? blkpg_ioctl+0xa90/0xa90
[  752.001379]  ? find_held_lock+0x35/0x130
[  752.007950]  ? debug_check_no_obj_freed+0x200/0x464
[  752.014331]  ? __fget+0x340/0x540
[  752.020365]  block_ioctl+0xee/0x130
[  752.024413]  ? blkdev_fallocate+0x410/0x410
[  752.030186]  do_vfs_ioctl+0xd5f/0x1380
[  752.034359]  ? selinux_file_ioctl+0x46f/0x5e0
[  752.039316]  ? selinux_file_ioctl+0x125/0x5e0
[  752.045950]  ? ioctl_preallocate+0x210/0x210
[  752.050651]  ? selinux_file_mprotect+0x620/0x620
[  752.055447]  ? iterate_fd+0x360/0x360
[  752.059266]  ? do_sys_open+0x31d/0x550
[  752.063181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  752.068741]  ? security_file_ioctl+0x8d/0xc0
[  752.073176]  ksys_ioctl+0xab/0xd0
[  752.076653]  __x64_sys_ioctl+0x73/0xb0
[  752.080558]  do_syscall_64+0xfd/0x620
[  752.084409]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  752.089607] RIP: 0033:0x45b1b7
[  752.092823] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  752.111733] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  752.119453] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  752.126733] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  752.135422] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  752.143408] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  752.150839] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000013
17:38:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c", 0x43}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  752.203498] xt_HMARK: spi-set and port-set can't be combined
[  752.341989] xt_HMARK: spi-set and port-set can't be combined
[  753.493909] Bluetooth: hci0: command 0x1003 tx timeout
[  753.499464] Bluetooth: hci0: sending frame failed (-49)
[  755.573942] Bluetooth: hci0: command 0x1001 tx timeout
[  755.579436] Bluetooth: hci0: sending frame failed (-49)
[  757.653872] Bluetooth: hci0: command 0x1009 tx timeout
17:38:19 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

17:38:19 executing program 1 (fault-call:0 fault-nth:20):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:19 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x33, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:19 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:38:19 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  761.612172] xt_HMARK: spi-set and port-set can't be combined
[  761.619266] xt_HMARK: spi-set and port-set can't be combined
[  761.635413] FAULT_INJECTION: forcing a failure.
[  761.635413] name failslab, interval 1, probability 0, space 0, times 0
[  761.662686] CPU: 0 PID: 13042 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  761.670633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  761.680152] Call Trace:
[  761.682771]  dump_stack+0x197/0x210
[  761.686434]  should_fail.cold+0xa/0x1b
[  761.690354]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  761.695481]  ? lock_downgrade+0x880/0x880
[  761.699660]  __should_failslab+0x121/0x190
[  761.703921]  should_failslab+0x9/0x14
[  761.707742]  kmem_cache_alloc_node+0x26c/0x710
[  761.712351]  ? find_held_lock+0x35/0x130
[  761.716444]  __alloc_skb+0xd5/0x5f0
[  761.720097]  ? skb_trim+0x190/0x190
[  761.723742]  ? kasan_check_read+0x11/0x20
[  761.727920]  alloc_uevent_skb+0x86/0x220
[  761.732013]  kobject_uevent_env+0x8fb/0x1170
[  761.736457]  kobject_uevent+0x20/0x30
[  761.740287]  lo_ioctl+0x100b/0x20e0
[  761.743939]  ? lo_rw_aio+0x1470/0x1470
[  761.747853]  blkdev_ioctl+0xc38/0x1ab6
[  761.751765]  ? blkpg_ioctl+0xa90/0xa90
[  761.755672]  ? find_held_lock+0x35/0x130
[  761.759756]  ? debug_check_no_obj_freed+0x200/0x464
[  761.764797]  ? __fget+0x340/0x540
[  761.768279]  block_ioctl+0xee/0x130
[  761.771923]  ? blkdev_fallocate+0x410/0x410
[  761.776269]  do_vfs_ioctl+0xd5f/0x1380
[  761.780163]  ? selinux_file_ioctl+0x46f/0x5e0
[  761.784669]  ? selinux_file_ioctl+0x125/0x5e0
[  761.789273]  ? ioctl_preallocate+0x210/0x210
[  761.793698]  ? selinux_file_mprotect+0x620/0x620
[  761.798478]  ? iterate_fd+0x360/0x360
[  761.802302]  ? do_sys_open+0x31d/0x550
[  761.806263]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  761.811825]  ? security_file_ioctl+0x8d/0xc0
[  761.816255]  ksys_ioctl+0xab/0xd0
[  761.819734]  __x64_sys_ioctl+0x73/0xb0
[  761.823810]  do_syscall_64+0xfd/0x620
[  761.827641]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  761.832853] RIP: 0033:0x45b1b7
[  761.836092] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  761.855019] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
17:38:20 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x34, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  761.862751] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  761.870043] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  761.877326] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  761.884623] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  761.891912] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000014
17:38:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:20 executing program 1 (fault-call:0 fault-nth:21):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:20 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x35, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:20 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  762.041196] xt_HMARK: spi-set and port-set can't be combined
[  762.101902] FAULT_INJECTION: forcing a failure.
[  762.101902] name failslab, interval 1, probability 0, space 0, times 0
[  762.139636] xt_HMARK: spi-set and port-set can't be combined
[  762.149933] CPU: 0 PID: 13067 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  762.157786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  762.167160] Call Trace:
[  762.169774]  dump_stack+0x197/0x210
[  762.173611]  should_fail.cold+0xa/0x1b
[  762.177527]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  762.182665]  ? lock_downgrade+0x880/0x880
[  762.187403]  __should_failslab+0x121/0x190
[  762.191663]  should_failslab+0x9/0x14
[  762.195487]  kmem_cache_alloc_node+0x26c/0x710
[  762.200088]  ? find_held_lock+0x35/0x130
[  762.204294]  __alloc_skb+0xd5/0x5f0
[  762.207954]  ? skb_trim+0x190/0x190
[  762.211617]  ? kasan_check_read+0x11/0x20
[  762.215954]  alloc_uevent_skb+0x86/0x220
[  762.220063]  kobject_uevent_env+0x8fb/0x1170
[  762.224512]  kobject_uevent+0x20/0x30
[  762.228341]  lo_ioctl+0x100b/0x20e0
[  762.232120]  ? lo_rw_aio+0x1470/0x1470
[  762.236038]  blkdev_ioctl+0xc38/0x1ab6
[  762.239954]  ? blkpg_ioctl+0xa90/0xa90
[  762.243866]  ? find_held_lock+0x35/0x130
[  762.247953]  ? debug_check_no_obj_freed+0x200/0x464
[  762.253142]  ? __fget+0x340/0x540
[  762.256633]  block_ioctl+0xee/0x130
[  762.260286]  ? blkdev_fallocate+0x410/0x410
[  762.264632]  do_vfs_ioctl+0xd5f/0x1380
[  762.268539]  ? selinux_file_ioctl+0x46f/0x5e0
[  762.273057]  ? selinux_file_ioctl+0x125/0x5e0
[  762.277819]  ? ioctl_preallocate+0x210/0x210
[  762.282256]  ? selinux_file_mprotect+0x620/0x620
[  762.287041]  ? iterate_fd+0x360/0x360
[  762.290860]  ? do_sys_open+0x31d/0x550
[  762.294885]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  762.300452]  ? security_file_ioctl+0x8d/0xc0
[  762.304908]  ksys_ioctl+0xab/0xd0
[  762.308385]  __x64_sys_ioctl+0x73/0xb0
[  762.312405]  do_syscall_64+0xfd/0x620
[  762.316234]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  762.321447] RIP: 0033:0x45b1b7
[  762.324658] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  762.343882] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
17:38:20 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  762.352098] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  762.360435] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  762.367950] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  762.375248] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  762.384807] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000015
[  762.442361] xt_HMARK: spi-set and port-set can't be combined
[  763.973874] Bluetooth: hci0: command 0x1003 tx timeout
[  763.973946] Bluetooth: hci0: sending frame failed (-49)
[  766.053941] Bluetooth: hci0: command 0x1001 tx timeout
[  766.059333] Bluetooth: hci0: sending frame failed (-49)
[  768.133938] Bluetooth: hci0: command 0x1009 tx timeout
17:38:30 executing program 1 (fault-call:0 fault-nth:22):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:30 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x36, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:30 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:38:30 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

17:38:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c0000080000", 0x48}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:30 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:30 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x37, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  772.514995] xt_HMARK: spi-set and port-set can't be combined
[  772.517136] xt_HMARK: spi-set and port-set can't be combined
[  772.527071] FAULT_INJECTION: forcing a failure.
[  772.527071] name failslab, interval 1, probability 0, space 0, times 0
[  772.575090] CPU: 0 PID: 13094 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  772.582937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  772.592296] Call Trace:
[  772.594905]  dump_stack+0x197/0x210
[  772.598552]  should_fail.cold+0xa/0x1b
[  772.602456]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  772.607574]  ? lock_downgrade+0x880/0x880
[  772.611750]  __should_failslab+0x121/0x190
[  772.616004]  should_failslab+0x9/0x14
[  772.619814]  kmem_cache_alloc+0x2ae/0x700
[  772.623980]  ? lock_downgrade+0x880/0x880
[  772.628145]  skb_clone+0x156/0x3e0
[  772.631701]  netlink_broadcast_filtered+0x875/0xb30
[  772.636745]  netlink_broadcast+0x3a/0x50
[  772.640834]  kobject_uevent_env+0x8c4/0x1170
[  772.645271]  kobject_uevent+0x20/0x30
[  772.649085]  lo_ioctl+0x100b/0x20e0
[  772.652728]  ? lo_rw_aio+0x1470/0x1470
[  772.656630]  blkdev_ioctl+0xc38/0x1ab6
[  772.660526]  ? blkpg_ioctl+0xa90/0xa90
[  772.664422]  ? find_held_lock+0x35/0x130
[  772.668488]  ? debug_check_no_obj_freed+0x200/0x464
[  772.673626]  ? __fget+0x340/0x540
[  772.677099]  block_ioctl+0xee/0x130
[  772.680735]  ? blkdev_fallocate+0x410/0x410
[  772.685081]  do_vfs_ioctl+0xd5f/0x1380
[  772.688984]  ? selinux_file_ioctl+0x46f/0x5e0
[  772.693497]  ? selinux_file_ioctl+0x125/0x5e0
[  772.698017]  ? ioctl_preallocate+0x210/0x210
[  772.702438]  ? selinux_file_mprotect+0x620/0x620
[  772.707221]  ? iterate_fd+0x360/0x360
[  772.711038]  ? do_sys_open+0x31d/0x550
[  772.714948]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  772.720502]  ? security_file_ioctl+0x8d/0xc0
[  772.724928]  ksys_ioctl+0xab/0xd0
[  772.728400]  __x64_sys_ioctl+0x73/0xb0
[  772.732302]  do_syscall_64+0xfd/0x620
[  772.736233]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  772.741436] RIP: 0033:0x45b1b7
[  772.744645] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  772.763559] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
17:38:31 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x38, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  772.771378] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045b1b7
[  772.778648] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005
[  772.785912] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  772.793174] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  772.800439] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000016
17:38:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:31 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x39, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:31 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000080))

17:38:31 executing program 1 (fault-call:0 fault-nth:23):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:31 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  772.962577] xt_HMARK: spi-set and port-set can't be combined
[  773.025122] xt_HMARK: spi-set and port-set can't be combined
[  773.031413] FAULT_INJECTION: forcing a failure.
[  773.031413] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  773.045252] CPU: 0 PID: 13120 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  773.053067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  773.062766] Call Trace:
[  773.068249]  dump_stack+0x197/0x210
[  773.072658]  should_fail.cold+0xa/0x1b
[  773.079589]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  773.085921]  ? mark_held_locks+0x100/0x100
[  773.093934]  ? blkdev_ioctl+0x12e/0x1ab6
[  773.099165]  __alloc_pages_nodemask+0x1ee/0x750
[  773.107348]  ? debug_check_no_obj_freed+0x200/0x464
[  773.112495]  ? __alloc_pages_slowpath+0x2870/0x2870
[  773.117631]  ? find_held_lock+0x35/0x130
[  773.121731]  cache_grow_begin+0x91/0x8c0
[  773.125878]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  773.131438]  ? check_preemption_disabled+0x48/0x290
[  773.136481]  kmem_cache_alloc+0x63b/0x700
[  773.140658]  getname_flags+0xd6/0x5b0
[  773.144483]  do_mkdirat+0xa0/0x2a0
[  773.148042]  ? __ia32_sys_mknod+0xb0/0xb0
[  773.152205]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  773.156977]  ? do_syscall_64+0x26/0x620
[  773.160961]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  773.166456]  ? do_syscall_64+0x26/0x620
[  773.170481]  ? lockdep_hardirqs_on+0x415/0x5d0
[  773.175085]  __x64_sys_mkdir+0x5c/0x80
[  773.179245]  do_syscall_64+0xfd/0x620
[  773.183066]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  773.188270] RIP: 0033:0x45a767
[  773.191481] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  773.210807] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  773.218534] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
17:38:31 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3a, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  773.225935] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  773.233362] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  773.240654] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  773.247972] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000017
17:38:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:31 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3b, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:31 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:38:31 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:31 executing program 1 (fault-call:0 fault-nth:24):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  773.364879] xt_HMARK: spi-set and port-set can't be combined
17:38:31 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3c, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:31 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  773.412118] xt_HMARK: spi-set and port-set can't be combined
[  773.430923] FAULT_INJECTION: forcing a failure.
[  773.430923] name failslab, interval 1, probability 0, space 0, times 0
[  773.491413] CPU: 1 PID: 13137 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  773.499247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  773.508748] Call Trace:
[  773.511658]  dump_stack+0x197/0x210
[  773.515310]  should_fail.cold+0xa/0x1b
[  773.519231]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  773.524354]  ? lock_downgrade+0x880/0x880
[  773.528533]  __should_failslab+0x121/0x190
[  773.532789]  should_failslab+0x9/0x14
[  773.536774]  kmem_cache_alloc+0x2ae/0x700
[  773.540966]  ? __d_lookup+0x433/0x760
[  773.544890]  ? lookup_dcache+0x23/0x140
[  773.548882]  ? d_lookup+0xf9/0x260
[  773.552437]  ? lockdep_hardirqs_on+0x415/0x5d0
[  773.557126]  __d_alloc+0x2e/0x9c0
[  773.560592]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  773.565634]  d_alloc+0x4d/0x280
[  773.568936]  __lookup_hash+0xcd/0x190
[  773.572754]  filename_create+0x1a7/0x4f0
[  773.576832]  ? kern_path_mountpoint+0x40/0x40
[  773.581428]  ? strncpy_from_user+0x21b/0x2d0
[  773.585945]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  773.591496]  ? getname_flags+0x277/0x5b0
[  773.595573]  do_mkdirat+0xb5/0x2a0
[  773.599140]  ? __ia32_sys_mknod+0xb0/0xb0
[  773.603328]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  773.608112]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  773.613498]  ? do_syscall_64+0x26/0x620
[  773.617495]  ? lockdep_hardirqs_on+0x415/0x5d0
[  773.622090]  __x64_sys_mkdir+0x5c/0x80
[  773.625994]  do_syscall_64+0xfd/0x620
[  773.629809]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  773.635006] RIP: 0033:0x45a767
[  773.638300] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  773.657263] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  773.664988] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  773.672360] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  773.679645] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  773.686933] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  773.695096] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000018
17:38:32 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3d, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  773.735495] xt_HMARK: spi-set and port-set can't be combined
[  775.334072] Bluetooth: hci0: command 0x1003 tx timeout
[  775.339665] Bluetooth: hci0: sending frame failed (-49)
[  777.414232] Bluetooth: hci0: command 0x1001 tx timeout
[  777.421423] Bluetooth: hci0: sending frame failed (-49)
[  779.494171] Bluetooth: hci0: command 0x1009 tx timeout
17:38:41 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

17:38:41 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:41 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x3e, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086", 0x4a}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:41 executing program 1 (fault-call:0 fault-nth:25):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:38:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

[  783.388312] FAULT_INJECTION: forcing a failure.
[  783.388312] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  783.404013] xt_HMARK: spi-set and port-set can't be combined
[  783.404119] CPU: 1 PID: 13153 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  783.421072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  783.424647] xt_HMARK: spi-set and port-set can't be combined
[  783.430456] Call Trace:
[  783.430480]  dump_stack+0x197/0x210
[  783.430505]  should_fail.cold+0xa/0x1b
[  783.446947]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  783.452083]  ? mark_held_locks+0x100/0x100
[  783.456338]  ? blkdev_ioctl+0x12e/0x1ab6
[  783.460517]  __alloc_pages_nodemask+0x1ee/0x750
[  783.465213]  ? debug_check_no_obj_freed+0x200/0x464
[  783.470257]  ? __alloc_pages_slowpath+0x2870/0x2870
[  783.475307]  ? find_held_lock+0x35/0x130
[  783.479412]  cache_grow_begin+0x91/0x8c0
[  783.483488]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  783.489042]  ? check_preemption_disabled+0x48/0x290
[  783.494083]  kmem_cache_alloc+0x63b/0x700
[  783.498255]  getname_flags+0xd6/0x5b0
[  783.502071]  do_mkdirat+0xa0/0x2a0
[  783.505628]  ? __ia32_sys_mknod+0xb0/0xb0
[  783.509790]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  783.514556]  ? do_syscall_64+0x26/0x620
[  783.518543]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  783.524095]  ? do_syscall_64+0x26/0x620
[  783.528082]  ? lockdep_hardirqs_on+0x415/0x5d0
[  783.532864]  __x64_sys_mkdir+0x5c/0x80
[  783.536767]  do_syscall_64+0xfd/0x620
[  783.540587]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  783.545789] RIP: 0033:0x45a767
[  783.548994] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  783.567905] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  783.575629] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  783.582906] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  783.590184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  783.597460] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  783.604765] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000019
17:38:41 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x41, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:42 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:42 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x42, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  783.783524] xt_HMARK: spi-set and port-set can't be combined
[  783.791725] xt_HMARK: spi-set and port-set can't be combined
17:38:42 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x60, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:42 executing program 1 (fault-call:0 fault-nth:26):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  784.035417] FAULT_INJECTION: forcing a failure.
[  784.035417] name failslab, interval 1, probability 0, space 0, times 0
[  784.059205] CPU: 0 PID: 13180 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  784.067067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  784.076442] Call Trace:
[  784.079066]  dump_stack+0x197/0x210
[  784.082727]  should_fail.cold+0xa/0x1b
[  784.086657]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  784.094921]  ? lock_downgrade+0x880/0x880
[  784.099100]  __should_failslab+0x121/0x190
[  784.103463]  should_failslab+0x9/0x14
[  784.107290]  kmem_cache_alloc+0x2ae/0x700
[  784.111457]  ? __d_lookup+0x433/0x760
[  784.115282]  ? lookup_dcache+0x23/0x140
[  784.119277]  ? d_lookup+0xf9/0x260
[  784.122847]  ? lockdep_hardirqs_on+0x415/0x5d0
[  784.127454]  __d_alloc+0x2e/0x9c0
[  784.130925]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  784.135958]  d_alloc+0x4d/0x280
[  784.139259]  __lookup_hash+0xcd/0x190
[  784.143082]  filename_create+0x1a7/0x4f0
[  784.147181]  ? kern_path_mountpoint+0x40/0x40
[  784.151706]  ? strncpy_from_user+0x21b/0x2d0
[  784.156147]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  784.165205]  ? getname_flags+0x277/0x5b0
[  784.178073]  do_mkdirat+0xb5/0x2a0
[  784.181636]  ? __ia32_sys_mknod+0xb0/0xb0
[  784.185802]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  784.190583]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  784.196108]  ? do_syscall_64+0x26/0x620
[  784.200113]  ? lockdep_hardirqs_on+0x415/0x5d0
[  784.204830]  __x64_sys_mkdir+0x5c/0x80
[  784.208749]  do_syscall_64+0xfd/0x620
[  784.213572]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  784.222482] RIP: 0033:0x45a767
[  784.225699] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  784.253607] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  784.261340] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  784.268634] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  784.275915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  784.283398] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  784.290719] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001a
[  785.413829] Bluetooth: hci0: command 0x1003 tx timeout
[  785.419419] Bluetooth: hci0: sending frame failed (-49)
[  787.493883] Bluetooth: hci0: command 0x1001 tx timeout
[  787.499330] Bluetooth: hci0: sending frame failed (-49)
[  789.573836] Bluetooth: hci0: command 0x1009 tx timeout
17:38:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

17:38:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:38:51 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:51 executing program 1 (fault-call:0 fault-nth:27):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  793.634421] x_tables: duplicate underflow at hook 1
[  793.637059] FAULT_INJECTION: forcing a failure.
[  793.637059] name failslab, interval 1, probability 0, space 0, times 0
[  793.641542] xt_HMARK: spi-set and port-set can't be combined
[  793.650903] CPU: 0 PID: 13188 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  793.664469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  793.673828] Call Trace:
[  793.676432]  dump_stack+0x197/0x210
[  793.680091]  should_fail.cold+0xa/0x1b
[  793.684034]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  793.689169]  ? lockdep_hardirqs_on+0x415/0x5d0
[  793.693788]  __should_failslab+0x121/0x190
[  793.698048]  should_failslab+0x9/0x14
[  793.701884]  kmem_cache_alloc+0x2ae/0x700
[  793.706049]  ? map_id_range_down+0x1ee/0x370
[  793.710483]  ? __put_user_ns+0x70/0x70
[  793.711147] xt_HMARK: spi-set and port-set can't be combined
[  793.714387]  selinux_inode_alloc_security+0xb6/0x2a0
[  793.714406]  security_inode_alloc+0x8a/0xd0
[  793.714426]  inode_init_always+0x56e/0xb40
[  793.733901]  alloc_inode+0x81/0x190
[  793.737554]  new_inode_pseudo+0x19/0xf0
[  793.741553]  new_inode+0x1f/0x40
[  793.744938]  __ext4_new_inode+0x3cb/0x52d0
[  793.749204]  ? kasan_check_read+0x11/0x20
[  793.753390]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  793.758957]  ? ext4_free_inode+0x1470/0x1470
[  793.763402]  ? dquot_get_next_dqblk+0x180/0x180
[  793.768204]  ? selinux_determine_inode_label+0x1b1/0x360
[  793.774046]  ext4_mkdir+0x3d5/0xdf0
[  793.777705]  ? ext4_init_dot_dotdot+0x520/0x520
[  793.782398]  ? selinux_inode_mkdir+0x23/0x30
[  793.786835]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  793.792503]  ? security_inode_mkdir+0xe4/0x120
[  793.797111]  vfs_mkdir+0x42e/0x690
[  793.800677]  do_mkdirat+0x234/0x2a0
[  793.804333]  ? __ia32_sys_mknod+0xb0/0xb0
[  793.808501]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  793.813283]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  793.818665]  ? do_syscall_64+0x26/0x620
[  793.822662]  ? lockdep_hardirqs_on+0x415/0x5d0
[  793.827265]  __x64_sys_mkdir+0x5c/0x80
[  793.831185]  do_syscall_64+0xfd/0x620
[  793.835020]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  793.840233] RIP: 0033:0x45a767
[  793.843449] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  793.862369] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  793.870107] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  793.877398] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  793.884685] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  793.891966] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  793.899246] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001b
17:38:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:38:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x0, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:52 executing program 1 (fault-call:0 fault-nth:28):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  794.008846] xt_HMARK: spi-set and port-set can't be combined
[  794.017109] xt_HMARK: spi-set and port-set can't be combined
17:38:52 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, @m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:38:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x5, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  794.100096] FAULT_INJECTION: forcing a failure.
[  794.100096] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  794.112914] CPU: 1 PID: 13209 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  794.120726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  794.130100] Call Trace:
[  794.132710]  dump_stack+0x197/0x210
[  794.136378]  should_fail.cold+0xa/0x1b
[  794.140289]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  794.144663] x_tables: duplicate underflow at hook 2
[  794.145409]  ? mark_held_locks+0x100/0x100
[  794.145435]  __alloc_pages_nodemask+0x1ee/0x750
[  794.159358]  ? find_held_lock+0x35/0x130
[  794.160997] x_tables: duplicate underflow at hook 2
[  794.163442]  ? __alloc_pages_slowpath+0x2870/0x2870
[  794.163474]  cache_grow_begin+0x91/0x8c0
[  794.163492]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  794.176349] xt_HMARK: spi-set and port-set can't be combined
[  794.177563]  ? check_preemption_disabled+0x48/0x290
[  794.177587]  kmem_cache_alloc+0x63b/0x700
[  794.177655]  ? security_compute_sid.part.0+0xbb0/0x15c0
[  794.177676]  ? ratelimit_state_init+0xb0/0xb0
[  794.195749] Bluetooth: Error in BCSP hdr checksum
[  794.198158]  ext4_alloc_inode+0x1f/0x630
[  794.198172]  ? ratelimit_state_init+0xb0/0xb0
[  794.198188]  alloc_inode+0x64/0x190
[  794.225050]  new_inode_pseudo+0x19/0xf0
[  794.229045]  new_inode+0x1f/0x40
[  794.232429]  __ext4_new_inode+0x3cb/0x52d0
[  794.236690]  ? kasan_check_read+0x11/0x20
[  794.240889]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  794.246479]  ? ext4_free_inode+0x1470/0x1470
17:38:52 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xa, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  794.250916]  ? dquot_get_next_dqblk+0x180/0x180
[  794.255610]  ? selinux_determine_inode_label+0x1b1/0x360
[  794.261083]  ext4_mkdir+0x3d5/0xdf0
[  794.264736]  ? ext4_init_dot_dotdot+0x520/0x520
[  794.269425]  ? selinux_inode_mkdir+0x23/0x30
[  794.273854]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  794.279416]  ? security_inode_mkdir+0xe4/0x120
[  794.284028]  vfs_mkdir+0x42e/0x690
[  794.287584]  do_mkdirat+0x234/0x2a0
[  794.291229]  ? __ia32_sys_mknod+0xb0/0xb0
[  794.295393]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  794.300166]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  794.300703] x_tables: duplicate underflow at hook 3
[  794.305546]  ? do_syscall_64+0x26/0x620
[  794.305567]  ? lockdep_hardirqs_on+0x415/0x5d0
[  794.305586]  __x64_sys_mkdir+0x5c/0x80
[  794.305603]  do_syscall_64+0xfd/0x620
[  794.305621]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  794.305632] RIP: 0033:0x45a767
[  794.305647] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  794.305655] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  794.305668] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  794.305676] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  794.305689] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  794.339880] x_tables: duplicate underflow at hook 3
[  794.354353] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  794.354363] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001c
[  794.548961] Bluetooth: Error in BCSP hdr checksum
[  795.973920] Bluetooth: hci0: command 0x1003 tx timeout
[  795.979448] Bluetooth: hci0: sending frame failed (-49)
[  798.054055] Bluetooth: hci0: command 0x1001 tx timeout
[  798.059461] Bluetooth: hci0: sending frame failed (-49)
[  800.133927] Bluetooth: hci0: command 0x1009 tx timeout
17:39:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, 0x0)

17:39:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, @m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:03 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xe, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:39:03 executing program 1 (fault-call:0 fault-nth:29):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:39:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:39:03 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a5", 0x4b}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  804.753309] xt_HMARK: spi-set and port-set can't be combined
[  804.760305] x_tables: duplicate underflow at hook 2
[  804.776117] xt_HMARK: spi-set and port-set can't be combined
[  804.779795] FAULT_INJECTION: forcing a failure.
[  804.779795] name failslab, interval 1, probability 0, space 0, times 0
[  804.786943] x_tables: duplicate underflow at hook 2
[  804.823452] CPU: 1 PID: 13230 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  804.831306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  804.840673] Call Trace:
[  804.843303]  dump_stack+0x197/0x210
[  804.846973]  should_fail.cold+0xa/0x1b
[  804.850890]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  804.856029]  __should_failslab+0x121/0x190
[  804.860287]  should_failslab+0x9/0x14
[  804.864118]  __kmalloc+0x2e2/0x750
[  804.867694]  ? ext4_find_extent+0x76e/0x9d0
[  804.872039]  ext4_find_extent+0x76e/0x9d0
[  804.876227]  ext4_ext_map_blocks+0x1c3/0x55c0
[  804.880752]  ? ext4_find_delalloc_cluster+0xb0/0xb0
[  804.885801]  ? __lock_is_held+0xb6/0x140
[  804.889892]  ? lock_acquire+0x16f/0x3f0
[  804.893893]  ? ext4_map_blocks+0x4cf/0x1b20
[  804.898246]  ext4_map_blocks+0xf83/0x1b20
[  804.902432]  ? ext4_issue_zeroout+0x170/0x170
[  804.906962]  ? kasan_check_write+0x14/0x20
[  804.911225]  ? __brelse+0x95/0xb0
[  804.914709]  ext4_getblk+0xc4/0x510
[  804.918355]  ? ext4_iomap_begin+0xf70/0xf70
[  804.922690]  ? ext4_free_inode+0x1470/0x1470
[  804.927121]  ext4_bread+0x8f/0x230
[  804.930677]  ? ext4_getblk+0x510/0x510
[  804.934596]  ext4_append+0x155/0x370
[  804.938341]  ext4_mkdir+0x61b/0xdf0
[  804.942001]  ? ext4_init_dot_dotdot+0x520/0x520
[  804.946698]  ? selinux_inode_mkdir+0x23/0x30
[  804.951138]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  804.956718]  ? security_inode_mkdir+0xe4/0x120
[  804.961324]  vfs_mkdir+0x42e/0x690
[  804.964912]  do_mkdirat+0x234/0x2a0
[  804.968565]  ? __ia32_sys_mknod+0xb0/0xb0
[  804.972742]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  804.977535]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  804.982928]  ? do_syscall_64+0x26/0x620
[  804.986927]  ? lockdep_hardirqs_on+0x415/0x5d0
[  804.991528]  __x64_sys_mkdir+0x5c/0x80
[  804.995443]  do_syscall_64+0xfd/0x620
[  804.999280]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  805.004481] RIP: 0033:0x45a767
17:39:03 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x10, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  805.007715] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  805.026814] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  805.035243] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  805.042526] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  805.049814] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  805.057111] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  805.064396] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001d
17:39:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, @m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}}}}]}, 0x48}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  805.085159] Bluetooth: Error in BCSP hdr checksum
[  805.133231] xt_HMARK: spi-set and port-set can't be combined
[  805.146582] xt_HMARK: spi-set and port-set can't be combined
17:39:03 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x300, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:39:03 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x38, 0x30, 0x53b, 0x0, 0x0, {}, [{0x24, 0x1, @m_skbedit={0x20, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:03 executing program 1 (fault-call:0 fault-nth:30):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  805.239668] xt_HMARK: spi-set and port-set can't be combined
[  805.253405] xt_HMARK: spi-set and port-set can't be combined
17:39:03 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4a0, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  805.298770] xt_HMARK: spi-set and port-set can't be combined
[  805.371187] xt_HMARK: spi-set and port-set can't be combined
[  805.441236] Bluetooth: Error in BCSP hdr checksum
[  805.526324] FAULT_INJECTION: forcing a failure.
[  805.526324] name failslab, interval 1, probability 0, space 0, times 0
[  805.544236] CPU: 0 PID: 13250 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  805.552059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  805.561421] Call Trace:
[  805.564205]  dump_stack+0x197/0x210
[  805.567855]  should_fail.cold+0xa/0x1b
[  805.571760]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  805.576884]  ? ext4_es_find_delayed_extent_range+0xa30/0xa30
[  805.582708]  __should_failslab+0x121/0x190
[  805.586959]  should_failslab+0x9/0x14
[  805.590769]  __kmalloc+0x2e2/0x750
[  805.594337]  ? ext4_find_extent+0x76e/0x9d0
[  805.598689]  ext4_find_extent+0x76e/0x9d0
[  805.602879]  ext4_ext_map_blocks+0x1c3/0x55c0
[  805.607416]  ? ext4_find_delalloc_cluster+0xb0/0xb0
[  805.612459]  ? __lock_is_held+0xb6/0x140
[  805.616545]  ? lock_acquire+0x16f/0x3f0
[  805.620538]  ? ext4_map_blocks+0x928/0x1b20
[  805.624900]  ext4_map_blocks+0x990/0x1b20
[  805.629076]  ? ext4_issue_zeroout+0x170/0x170
[  805.633592]  ? kasan_check_write+0x14/0x20
[  805.637861]  ? __brelse+0x95/0xb0
[  805.641333]  ext4_getblk+0xc4/0x510
[  805.644975]  ? ext4_iomap_begin+0xf70/0xf70
[  805.649317]  ? ext4_free_inode+0x1470/0x1470
[  805.653863]  ext4_bread+0x8f/0x230
[  805.657424]  ? ext4_getblk+0x510/0x510
[  805.661346]  ext4_append+0x155/0x370
[  805.665089]  ext4_mkdir+0x61b/0xdf0
[  805.668768]  ? ext4_init_dot_dotdot+0x520/0x520
[  805.673463]  ? selinux_inode_mkdir+0x23/0x30
[  805.677895]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  805.683467]  ? security_inode_mkdir+0xe4/0x120
[  805.688082]  vfs_mkdir+0x42e/0x690
[  805.691732]  do_mkdirat+0x234/0x2a0
[  805.695404]  ? __ia32_sys_mknod+0xb0/0xb0
[  805.700305]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  805.705202]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  805.710589]  ? do_syscall_64+0x26/0x620
[  805.714583]  ? lockdep_hardirqs_on+0x415/0x5d0
[  805.719288]  __x64_sys_mkdir+0x5c/0x80
[  805.723205]  do_syscall_64+0xfd/0x620
[  805.727030]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  805.732232] RIP: 0033:0x45a767
[  805.735548] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  805.754677] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  805.762417] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  805.769789] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  805.777067] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  805.784452] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  805.791741] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001e
[  806.853836] Bluetooth: hci0: command 0x1003 tx timeout
[  806.859320] Bluetooth: hci0: sending frame failed (-49)
[  808.943877] Bluetooth: hci0: command 0x1001 tx timeout
[  808.949276] Bluetooth: hci0: sending frame failed (-49)
[  811.013839] Bluetooth: hci0: command 0x1009 tx timeout
17:39:13 executing program 1 (fault-call:0 fault-nth:31):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

17:39:13 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x508, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

17:39:13 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:13 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x38, 0x30, 0x53b, 0x0, 0x0, {}, [{0x24, 0x1, @m_skbedit={0x20, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa17}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xb, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x281, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x7, 0x0, [{0x969, 0x0, 0x3}, {0x8c0, 0x0, 0x3}, {0x11a9, 0x0, 0x5}, {0xb3c, 0x0, 0xffffffff}, {0xa98, 0x0, 0x8}, {0xb6c, 0x0, 0x2}, {0xa85, 0x0, 0x8}]})

17:39:13 executing program 4 (fault-call:7 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = eventfd2(0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000080))

[  815.377256] FAULT_INJECTION: forcing a failure.
[  815.377256] name failslab, interval 1, probability 0, space 0, times 0
[  815.388869] CPU: 0 PID: 13257 Comm: syz-executor.1 Not tainted 4.19.97-syzkaller #0
[  815.396680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  815.406050] Call Trace:
[  815.408655]  dump_stack+0x197/0x210
[  815.412515]  should_fail.cold+0xa/0x1b
[  815.416437]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  815.421913]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.427482]  __should_failslab+0x121/0x190
[  815.428928] xt_HMARK: spi-set and port-set can't be combined
[  815.431753]  should_failslab+0x9/0x14
[  815.439387] xt_HMARK: spi-set and port-set can't be combined
[  815.441384]  __kmalloc+0x71/0x750
[  815.441409]  ? context_struct_to_string+0x428/0x880
[  815.455870]  context_struct_to_string+0x428/0x880
[  815.460746]  ? security_load_policycaps+0x540/0x540
[  815.465781]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.471341]  ? sidtab_search_core+0x1d0/0x320
[  815.475872]  security_sid_to_context_core.isra.0+0x226/0x2f0
[  815.481702]  security_sid_to_context_force+0x38/0x50
[  815.486834]  selinux_inode_init_security+0x3b6/0x7a0
[  815.491974]  ? selinux_inode_create+0x30/0x30
[  815.493002] xt_HMARK: spi-set and port-set can't be combined
[  815.496482]  ? ext4_get_acl+0x107/0x5a0
[  815.496500]  ? rcu_read_lock_sched_held+0x110/0x130
[  815.496529]  security_inode_init_security+0x1ad/0x3b0
[  815.496545]  ? ext4_init_acl+0x240/0x240
[  815.496566]  ? security_kernel_load_data+0xb0/0xb0
17:39:13 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x568, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  815.496582]  ? posix_acl_create+0x11a/0x450
[  815.496596]  ? lock_downgrade+0x880/0x880
[  815.496617]  ? ext4_set_acl+0x490/0x490
[  815.496634]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.496648]  ? check_preemption_disabled+0x48/0x290
[  815.496667]  ext4_init_security+0x34/0x40
[  815.496690]  __ext4_new_inode+0x3b2f/0x52d0
[  815.496721]  ? ext4_free_inode+0x1470/0x1470
[  815.496742]  ? dquot_get_next_dqblk+0x180/0x180
[  815.496769]  ? selinux_determine_inode_label+0x1b1/0x360
[  815.571856]  ext4_mkdir+0x3d5/0xdf0
[  815.575546]  ? ext4_init_dot_dotdot+0x520/0x520
[  815.580247]  ? selinux_inode_mkdir+0x23/0x30
[  815.584849]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.590404]  ? security_inode_mkdir+0xe4/0x120
[  815.595015]  vfs_mkdir+0x42e/0x690
[  815.598593]  do_mkdirat+0x234/0x2a0
[  815.602245]  ? __ia32_sys_mknod+0xb0/0xb0
[  815.606415]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  815.611190]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  815.616568]  ? do_syscall_64+0x26/0x620
[  815.620563]  ? lockdep_hardirqs_on+0x415/0x5d0
[  815.625165]  __x64_sys_mkdir+0x5c/0x80
[  815.629074]  do_syscall_64+0xfd/0x620
[  815.632910]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  815.638115] RIP: 0033:0x45a767
[  815.641436] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  815.660359] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  815.668081] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  815.675358] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  815.682639] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  815.689929] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  815.697262] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 000000000000001f
[  815.705583] FAULT_INJECTION: forcing a failure.
[  815.705583] name failslab, interval 1, probability 0, space 0, times 0
17:39:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x38, 0x30, 0x53b, 0x0, 0x0, {}, [{0x24, 0x1, @m_skbedit={0x20, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

[  815.723121] CPU: 0 PID: 13273 Comm: syz-executor.4 Not tainted 4.19.97-syzkaller #0
[  815.730940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  815.740300] Call Trace:
[  815.742907]  dump_stack+0x197/0x210
[  815.746597]  should_fail.cold+0xa/0x1b
[  815.750527]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  815.755649]  ? __lock_acquire+0x6ee/0x49c0
[  815.759906]  ? __lock_acquire+0x6ee/0x49c0
[  815.764163]  ? avc_has_extended_perms+0x10f0/0x10f0
[  815.769227]  __should_failslab+0x121/0x190
[  815.773487]  should_failslab+0x9/0x14
[  815.777303]  kmem_cache_alloc_node+0x56/0x710
[  815.781813]  ? mark_held_locks+0x100/0x100
[  815.786079]  __alloc_skb+0xd5/0x5f0
[  815.789730]  ? skb_trim+0x190/0x190
[  815.793456]  ? ldsem_wake+0x40/0x40
[  815.797170]  bcsp_recv+0x925/0x1430
[  815.800830]  hci_uart_tty_receive+0x225/0x530
[  815.805341]  ? hci_uart_write_work+0x710/0x710
[  815.809945]  tty_ioctl+0xe91/0x1510
[  815.813590]  ? tty_vhangup+0x30/0x30
[  815.817320]  ? mark_held_locks+0x100/0x100
[  815.821575]  ? proc_cwd_link+0x100/0x1d0
[  815.825654]  ? __fget+0x340/0x540
[  815.829152]  ? __might_sleep+0x95/0x190
[  815.833141]  ? tty_vhangup+0x30/0x30
[  815.836875]  do_vfs_ioctl+0xd5f/0x1380
[  815.840884]  ? selinux_file_ioctl+0x46f/0x5e0
[  815.845569]  ? selinux_file_ioctl+0x125/0x5e0
[  815.850203]  ? ioctl_preallocate+0x210/0x210
[  815.854646]  ? selinux_file_mprotect+0x620/0x620
[  815.859425]  ? iterate_fd+0x360/0x360
[  815.863242]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  815.868798]  ? fput+0x128/0x1a0
[  815.872105]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  815.877664]  ? security_file_ioctl+0x8d/0xc0
[  815.882184]  ksys_ioctl+0xab/0xd0
[  815.885656]  __x64_sys_ioctl+0x73/0xb0
[  815.889572]  do_syscall_64+0xfd/0x620
[  815.893393]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  815.898593] RIP: 0033:0x45b349
[  815.901884] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  815.920804] RSP: 002b:00007f44afd52c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  815.928530] RAX: ffffffffffffffda RBX: 00007f44afd536d4 RCX: 000000000045b349
[  815.935809] RDX: 0000000020000080 RSI: 0000000000005412 RDI: 0000000000000003
[  815.943217] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  815.950504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007
[  815.957784] R13: 000000000000055f R14: 00000000004c6aa3 R15: 0000000000000000
[  815.966898] xt_HMARK: spi-set and port-set can't be combined
[  815.968812] kasan: CONFIG_KASAN_INLINE enabled
[  815.985936] kasan: GPF could be caused by NULL-ptr deref or user memory access
[  815.996795] xt_HMARK: spi-set and port-set can't be combined
[  816.005508] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  816.011759] CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.97-syzkaller #0
[  816.019242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  816.028608] Workqueue: events_unbound flush_to_ldisc
[  816.033728] RIP: 0010:skb_put+0x35/0x1e0
[  816.037794] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 9c c8 aa fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
[  816.056709] RSP: 0018:ffff8880a996fb30 EFLAGS: 00010202
[  816.062082] RAX: dffffc0000000000 RBX: ffff888095d31040 RCX: ffffffff85407cb2
[  816.069355] RDX: 0000000000000019 RSI: ffffffff85c04d24 RDI: 0000000000000000
[  816.076633] RBP: ffff8880a996fb60 R08: ffff8880a995a600 R09: ffffed1015d04733
[  816.083907] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000
[  816.091178] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
[  816.098450] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  816.106685] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  816.112571] CR2: 0000001b32a23000 CR3: 0000000082cb7000 CR4: 00000000001406f0
[  816.119851] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  816.127128] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  816.134423] Call Trace:
[  816.137026]  ? __lock_is_held+0xb6/0x140
[  816.141102]  bcsp_recv+0xa0c/0x1430
[  816.144758]  hci_uart_tty_receive+0x225/0x530
[  816.149279]  ? hci_uart_write_work+0x710/0x710
[  816.153878]  tty_ldisc_receive_buf+0x15f/0x1c0
[  816.158476]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  816.164126]  tty_port_default_receive_buf+0x7d/0xb0
[  816.169504]  flush_to_ldisc+0x222/0x390
[  816.173496]  process_one_work+0x989/0x1750
[  816.177748]  ? pwq_dec_nr_in_flight+0x320/0x320
[  816.182448]  ? lock_acquire+0x16f/0x3f0
17:39:14 executing program 1 (fault-call:0 fault-nth:32):
syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002780)={[{@session={'session', 0x3d, 0x1ff}}]})

[  816.186437]  ? kasan_check_write+0x14/0x20
[  816.187238] xt_HMARK: spi-set and port-set can't be combined
[  816.190689]  ? do_raw_spin_lock+0xd7/0x250
[  816.190710]  worker_thread+0x98/0xe40
[  816.198363] Bluetooth: Can't allocate mem for new packet
[  816.200751]  ? trace_hardirqs_on+0x67/0x220
[  816.200772]  kthread+0x354/0x420
[  816.217693]  ? process_one_work+0x1750/0x1750
[  816.222212]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  816.227774]  ret_from_fork+0x24/0x30
[  816.231499] Modules linked in:
[  816.235827] ---[ end trace 6639e8272d66e097 ]---
[  816.241220] RIP: 0010:skb_put+0x35/0x1e0
[  816.245412] Code: 89 f5 41 54 49 89 fc 53 4d 8d b4 24 c8 00 00 00 48 83 ec 08 e8 9c c8 aa fb 4c 89 f2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 58
[  816.264686] RSP: 0018:ffff8880a996fb30 EFLAGS: 00010202
[  816.270359] RAX: dffffc0000000000 RBX: ffff888095d31040 RCX: ffffffff85407cb2
[  816.278136] RDX: 0000000000000019 RSI: ffffffff85c04d24 RDI: 0000000000000000
17:39:14 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:14 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xa5, 0x56, &(0x7f0000000640)="f406f9b952f6435099f7d875372dc36bb86afb11c8dfe45d8e978d0e4d9ec3c06d9f2a60ddec3c0a5976712964e6d00079fecc4f817843c7720035f5baa3cb32dbd392685faef718a5790fa874b8ae2a0488c1efd1dd553d90a360247cbfc5627d8b771411b46c3eb28a55a68522a105be55284ade862c5506a4125ecb854abf39cfdd0c72f977117b71ccfb332b64969b7dc9b96e40e61bcab35afaa940f45f2fbeee2ce5", &(0x7f0000000700)=""/86, 0x7, 0x0, 0x1f, 0x89, &(0x7f0000000780)="b92b52c9652e67e49e87a7ac6b265ed0fe99b97332439bfc4dc6e4f1a1e31f", &(0x7f00000007c0)="eba2532d6f44e71b3e1cd9da42ae6788bb316d9ac58b9484a86d91ff2bcfca34acfc85963a007d6e599c75e1610d6b9619ded9ed5102d3d982cc0c7b197149060e675ec19c7f10ac16850a8a7fbc0f3e36c830e3b847d2d93bf2be4ff67ba80ccc5b1be9a1db2ba333912efe47e5dbe4ea826c69b650854d6731db0402a583b4c2caee5fd9a7596ee5"}, 0x40)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="4c000000120081f87059ae08060c0424c1006b10400103fe0500418701546fabca1b4e7d06a6bd7c4972f750375ed08a5678f18678f1536f39d6e74703c48f93b82a0c00000800000086a500", 0x4c}], 0x1, 0x0, 0x0, 0xa000000}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)=0xff)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000000a40), 0x8000000000000b0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000000)=0x22020, 0x4)
r4 = socket(0x2c, 0xa, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000100)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}}}}]}, 0x50}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xb46221a0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x730}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x67ae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000)
tee(r0, r1, 0x3, 0x1)
write$cgroup_int(r0, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071")
connect$llc(r5, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x0, 0x6, @link_local}, 0x10)
sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

17:39:14 executing program 5:
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x6be, 0x3, 0x220, 0x0, 0x0, 0xd0, 0xd0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}}}, {{@ip={@local, @remote, 0x0, 0x0, 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)

[  816.285879] RBP: ffff8880a996fb60 R08: ffff8880a995a600 R09: ffffed1015d04733
[  816.293308] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 0000000000000000
[  816.305524] R13: 0000000000000001 R14: 00000000000000c8 R15: 0000000000000000
[  816.325002] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  816.334788] FAULT_INJECTION: forcing a failure.
[  816.334788] name failslab, interval 1, probability 0, space 0, times 0
[  816.353777] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  816.361655] xt_HMARK: spi-set and port-set can't be combined
[  816.365214] CR2: 00007fffcd3ae978 CR3: 000000008722a000 CR4: 00000000001406f0
[  816.367746] x_tables: duplicate underflow at hook 2
[  816.381221] CPU: 0 PID: 13281 Comm: syz-executor.1 Tainted: G      D           4.19.97-syzkaller #0
[  816.390425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  816.392293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  816.399779] Call Trace:
[  816.399804]  dump_stack+0x197/0x210
[  816.399825]  should_fail.cold+0xa/0x1b
[  816.399851]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  816.399869]  ? ext4_es_find_delayed_extent_range+0xa30/0xa30
[  816.399889]  __should_failslab+0x121/0x190
[  816.419343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  816.422359]  should_failslab+0x9/0x14
[  816.422373]  __kmalloc+0x2e2/0x750
[  816.422389]  ? quarantine_put+0x11c/0x1c0
[  816.422408]  ? ext4_find_extent+0x76e/0x9d0
[  816.437128] Kernel panic - not syncing: Fatal exception
[  816.439688]  ext4_find_extent+0x76e/0x9d0
[  816.464940]  ? ext4_ext_map_blocks+0x8de/0x55c0
[  816.469624]  ext4_ext_map_blocks+0x1c3/0x55c0
[  816.474134]  ? ext4_find_delalloc_cluster+0xb0/0xb0
[  816.479165]  ? lock_downgrade+0x880/0x880
[  816.483327]  ? lock_acquire+0x16f/0x3f0
[  816.487309]  ? ext4_map_blocks+0x928/0x1b20
[  816.491642]  ext4_map_blocks+0x990/0x1b20
[  816.495801]  ? ext4_issue_zeroout+0x170/0x170
[  816.500299]  ? check_preemption_disabled+0x48/0x290
[  816.505341]  ? kasan_check_write+0x14/0x20
[  816.509581]  ? __brelse+0x95/0xb0
[  816.513044]  ext4_getblk+0xc4/0x510
[  816.516679]  ? ext4_iomap_begin+0xf70/0xf70
[  816.521011]  ? ext4_free_inode+0x1470/0x1470
[  816.525431]  ext4_bread+0x8f/0x230
[  816.528979]  ? ext4_getblk+0x510/0x510
[  816.532881]  ext4_append+0x155/0x370
[  816.536608]  ext4_mkdir+0x61b/0xdf0
[  816.540233]  ? ext4_init_dot_dotdot+0x520/0x520
[  816.544916]  ? selinux_inode_mkdir+0x23/0x30
[  816.549416]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  816.554960]  ? security_inode_mkdir+0xe4/0x120
[  816.559545]  vfs_mkdir+0x42e/0x690
[  816.563102]  do_mkdirat+0x234/0x2a0
[  816.566722]  ? __ia32_sys_mknod+0xb0/0xb0
[  816.570866]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[  816.576222]  ? trace_hardirqs_off_caller+0x65/0x220
[  816.581237]  __x64_sys_mkdir+0x5c/0x80
[  816.585158]  do_syscall_64+0xfd/0x620
[  816.588966]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  816.594147] RIP: 0033:0x45a767
[  816.597336] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  816.616247] RSP: 002b:00007f7852458a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053
[  816.623952] RAX: ffffffffffffffda RBX: 00007f78524596d4 RCX: 000000000045a767
[  816.631213] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080
[  816.638471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a
[  816.645741] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003
[  816.653019] R13: 0000000000000b79 R14: 00000000004cc5a0 R15: 0000000000000020
[  816.661484] Kernel Offset: disabled
[  816.665112] Rebooting in 86400 seconds..