7] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.115326] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.270144] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.275418] protocol 88fb is buggy, dev hsr_slave_1 [ 1043.350160] protocol 88fb is buggy, dev hsr_slave_0 [ 1043.355330] protocol 88fb is buggy, dev hsr_slave_1 15:36:57 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r0, 0x0) 15:36:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\xff\x01\xa0\xff\xff\xff\xff\x00', @random="0100040c0b10"}) 15:36:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:36:57 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:36:57 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:36:57 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:36:57 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r0, 0x0) 15:36:57 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 15:36:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:36:57 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:36:58 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'batadv0\x00\xff\x01\xa0\xff\xff\xff\xff\x00', @random="0100040c0b10"}) 15:36:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:36:58 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:36:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x0, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:36:58 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:36:58 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:00 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:00 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:00 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:00 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:00 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:00 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:01 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:01 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:01 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) [ 1047.430125] net_ratelimit: 19 callbacks suppressed [ 1047.430131] protocol 88fb is buggy, dev hsr_slave_0 [ 1047.440388] protocol 88fb is buggy, dev hsr_slave_1 [ 1047.520594] protocol 88fb is buggy, dev hsr_slave_0 [ 1047.525715] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.550219] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.555361] protocol 88fb is buggy, dev hsr_slave_1 [ 1048.710231] protocol 88fb is buggy, dev hsr_slave_0 [ 1048.715368] protocol 88fb is buggy, dev hsr_slave_1 [ 1049.350150] protocol 88fb is buggy, dev hsr_slave_0 [ 1049.355306] protocol 88fb is buggy, dev hsr_slave_1 15:37:03 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:03 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:03 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:03 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:03 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) 15:37:04 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, 0x0, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) [ 1052.720144] net_ratelimit: 15 callbacks suppressed [ 1052.720149] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.730381] protocol 88fb is buggy, dev hsr_slave_1 [ 1052.870187] protocol 88fb is buggy, dev hsr_slave_0 [ 1052.875343] protocol 88fb is buggy, dev hsr_slave_1 15:37:06 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:06 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:06 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:06 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:37:06 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) [ 1053.096048] ip_tables: iptables: counters copy to user failed while replacing table 15:37:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:37:07 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) [ 1053.325315] ip_tables: iptables: counters copy to user failed while replacing table 15:37:07 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) [ 1053.489329] ip_tables: iptables: counters copy to user failed while replacing table [ 1053.510136] protocol 88fb is buggy, dev hsr_slave_0 [ 1053.515304] protocol 88fb is buggy, dev hsr_slave_1 [ 1053.670154] protocol 88fb is buggy, dev hsr_slave_0 15:37:10 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:10 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:37:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:10 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:10 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:10 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:37:10 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:37:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:10 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:10 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1057.830160] net_ratelimit: 23 callbacks suppressed [ 1057.830166] protocol 88fb is buggy, dev hsr_slave_0 [ 1057.840302] protocol 88fb is buggy, dev hsr_slave_1 [ 1057.910141] protocol 88fb is buggy, dev hsr_slave_0 [ 1057.915240] protocol 88fb is buggy, dev hsr_slave_1 [ 1058.960156] protocol 88fb is buggy, dev hsr_slave_0 [ 1058.965278] protocol 88fb is buggy, dev hsr_slave_1 [ 1059.120176] protocol 88fb is buggy, dev hsr_slave_0 [ 1059.125314] protocol 88fb is buggy, dev hsr_slave_1 15:37:13 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:13 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:13 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:13 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r2, 0x0) 15:37:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) [ 1059.381926] ip_tables: iptables: counters copy to user failed while replacing table 15:37:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 15:37:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) [ 1059.750154] protocol 88fb is buggy, dev hsr_slave_0 15:37:16 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:16 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:16 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:16 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, 0xffffffffffffffff, 0x0) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 15:37:16 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) [ 1063.120188] net_ratelimit: 16 callbacks suppressed [ 1063.120193] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.130359] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.270176] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.275282] protocol 88fb is buggy, dev hsr_slave_1 [ 1063.910150] protocol 88fb is buggy, dev hsr_slave_0 [ 1063.915256] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.080156] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.085281] protocol 88fb is buggy, dev hsr_slave_1 [ 1064.160417] protocol 88fb is buggy, dev hsr_slave_0 [ 1064.165537] protocol 88fb is buggy, dev hsr_slave_1 15:37:19 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, 0xffffffffffffffff, 0x0) 15:37:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, 0x0, 0x0, 0x0) 15:37:19 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:19 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:19 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:37:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, 0xffffffffffffffff, 0x0) 15:37:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xfeffffff00000000) 15:37:19 executing program 1: getresuid(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @dev}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 15:37:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 15:37:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='\x00\x00I1', 0x807) 15:37:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) [ 1068.230123] net_ratelimit: 17 callbacks suppressed [ 1068.230127] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.240149] protocol 88fb is buggy, dev hsr_slave_1 [ 1068.320180] protocol 88fb is buggy, dev hsr_slave_0 [ 1068.325332] protocol 88fb is buggy, dev hsr_slave_1 15:37:22 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}], 0x1) 15:37:22 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 15:37:22 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:22 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8, 0x800}]) 15:37:22 executing program 1: [ 1068.639721] ip_tables: iptables: counters copy to user failed while replacing table [ 1068.661768] Dev loop3: RDB in block 4 has bad checksum [ 1068.667314] Dev loop3: unable to read RDB block 8 [ 1068.672511] loop3: unable to read partition table [ 1068.678724] loop3: partition table beyond EOD, truncated [ 1068.684407] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:22 executing program 1: 15:37:22 executing program 1: 15:37:22 executing program 1: [ 1068.803026] Dev loop3: RDB in block 4 has bad checksum [ 1068.808500] Dev loop3: unable to read RDB block 8 [ 1068.829313] loop3: unable to read partition table [ 1068.843846] loop3: partition table beyond EOD, truncated 15:37:22 executing program 1: 15:37:22 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8, 0x800}]) [ 1068.849765] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1068.984552] Dev loop3: RDB in block 4 has bad checksum [ 1068.990276] Dev loop3: unable to read RDB block 8 [ 1068.995514] loop3: unable to read partition table [ 1069.000604] loop3: partition table beyond EOD, truncated [ 1069.006067] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1069.350207] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.355380] protocol 88fb is buggy, dev hsr_slave_1 [ 1069.510195] protocol 88fb is buggy, dev hsr_slave_0 [ 1069.515361] protocol 88fb is buggy, dev hsr_slave_1 [ 1070.150148] protocol 88fb is buggy, dev hsr_slave_0 15:37:25 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:25 executing program 1: 15:37:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8, 0x800}]) 15:37:25 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:25 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:25 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:25 executing program 1: syz_open_dev$sndpcmp(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x369e5d84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) [ 1071.707244] Dev loop3: RDB in block 4 has bad checksum [ 1071.715514] Dev loop3: unable to read RDB block 8 [ 1071.726137] loop3: unable to read partition table [ 1071.731315] loop3: partition table beyond EOD, truncated [ 1071.737345] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:25 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8, 0x800}]) 15:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200)="b3", 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6f8) socket(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1071.923630] Dev loop3: RDB in block 4 has bad checksum [ 1071.929186] Dev loop3: unable to read RDB block 8 [ 1071.935123] loop3: unable to read partition table [ 1071.949291] loop3: partition table beyond EOD, truncated [ 1071.954995] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:26 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) 15:37:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$ppp(0xffffffffffffffff, &(0x7f0000000200)="b3", 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6f8) socket(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) 15:37:26 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) [ 1073.520142] net_ratelimit: 16 callbacks suppressed [ 1073.520148] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.520221] protocol 88fb is buggy, dev hsr_slave_1 [ 1073.670158] protocol 88fb is buggy, dev hsr_slave_0 [ 1073.675318] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.310146] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.315378] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.470148] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.475490] protocol 88fb is buggy, dev hsr_slave_1 [ 1074.550210] protocol 88fb is buggy, dev hsr_slave_0 [ 1074.555409] protocol 88fb is buggy, dev hsr_slave_1 15:37:28 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:28 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = creat(0x0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) 15:37:28 executing program 3: syz_read_part_table(0x0, 0x0, 0x0) 15:37:28 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:28 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:28 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:28 executing program 3: syz_read_part_table(0x0, 0x0, &(0x7f0000003800)) 15:37:28 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TCGETX(r0, 0x5432, 0x0) 15:37:28 executing program 3: syz_read_part_table(0x0, 0x0, &(0x7f0000003800)) 15:37:29 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x800000000050000}]}) r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) 15:37:29 executing program 3: syz_read_part_table(0x0, 0x0, &(0x7f0000003800)) 15:37:29 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:31 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{0x0, 0x0, 0x800}]) 15:37:31 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:31 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:31 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:31 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1077.846658] Dev loop3: unable to read RDB block 8 [ 1077.852233] loop3: unable to read partition table [ 1077.861852] loop3: partition table beyond EOD, truncated [ 1077.868310] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:31 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{0x0, 0x0, 0x800}]) 15:37:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{0x0, 0x0, 0x800}]) [ 1078.021364] Dev loop3: unable to read RDB block 8 [ 1078.026330] loop3: unable to read partition table [ 1078.035374] loop3: partition table beyond EOD, truncated [ 1078.041179] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1078.161695] Dev loop3: unable to read RDB block 8 [ 1078.166660] loop3: unable to read partition table [ 1078.172098] loop3: partition table beyond EOD, truncated [ 1078.177659] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000), 0x0, 0x800}]) [ 1078.371671] Dev loop3: unable to read RDB block 8 [ 1078.376862] loop3: unable to read partition table [ 1078.388904] loop3: partition table beyond EOD, truncated [ 1078.402642] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000), 0x0, 0x800}]) 15:37:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1078.596628] Dev loop3: unable to read RDB block 8 [ 1078.601938] loop3: unable to read partition table [ 1078.619620] loop3: partition table beyond EOD, truncated [ 1078.630158] net_ratelimit: 18 callbacks suppressed [ 1078.630163] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.640618] protocol 88fb is buggy, dev hsr_slave_1 [ 1078.662954] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:32 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000), 0x0, 0x800}]) [ 1078.710146] protocol 88fb is buggy, dev hsr_slave_0 [ 1078.715524] protocol 88fb is buggy, dev hsr_slave_1 [ 1078.851398] Dev loop3: unable to read RDB block 8 [ 1078.856414] loop3: unable to read partition table [ 1078.871925] loop3: partition table beyond EOD, truncated [ 1078.893569] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1079.750165] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.755302] protocol 88fb is buggy, dev hsr_slave_1 [ 1079.910204] protocol 88fb is buggy, dev hsr_slave_0 [ 1079.915334] protocol 88fb is buggy, dev hsr_slave_1 [ 1080.550156] protocol 88fb is buggy, dev hsr_slave_0 [ 1080.555259] protocol 88fb is buggy, dev hsr_slave_1 15:37:34 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:34 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, 0xffffffffffffffff) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x16) 15:37:34 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:34 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:34 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)='RDSK', 0x4, 0x800}]) 15:37:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1080.971721] loop3: RDSK (0) [ 1080.971721] unable to read partition table [ 1080.979186] loop3: partition table beyond EOD, truncated [ 1080.985500] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)='RDSK', 0x4, 0x800}]) [ 1081.091559] loop3: RDSK (0) [ 1081.091559] unable to read partition table [ 1081.098984] loop3: partition table beyond EOD, truncated [ 1081.104816] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)='RDSK', 0x4, 0x800}]) [ 1081.241685] loop3: RDSK (0) [ 1081.241685] unable to read partition table [ 1081.249166] loop3: partition table beyond EOD, truncated [ 1081.255012] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd727", 0x6, 0x800}]) [ 1081.363448] loop3: RDSK (0) [ 1081.363448] unable to read partition table [ 1081.370963] loop3: partition table beyond EOD, truncated [ 1081.376434] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd727", 0x6, 0x800}]) [ 1081.505162] loop3: RDSK (0) [ 1081.505162] unable to read partition table [ 1081.513279] loop3: partition table beyond EOD, truncated [ 1081.519364] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd727", 0x6, 0x800}]) [ 1081.641551] loop3: RDSK (0) [ 1081.641551] unable to read partition table [ 1081.649075] loop3: partition table beyond EOD, truncated [ 1081.654787] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:35 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:35 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:37 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x16) 15:37:37 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f", 0x7, 0x800}]) 15:37:37 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:37 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:37 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1083.910170] net_ratelimit: 16 callbacks suppressed [ 1083.910176] protocol 88fb is buggy, dev hsr_slave_0 [ 1083.920284] protocol 88fb is buggy, dev hsr_slave_1 15:37:37 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) [ 1084.041612] loop3: RDSK (0) [ 1084.041612] unable to read partition table [ 1084.049491] loop3: partition table beyond EOD, truncated [ 1084.050760] ip_tables: iptables: counters copy to user failed while replacing table [ 1084.056426] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 1084.070361] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.070417] protocol 88fb is buggy, dev hsr_slave_1 15:37:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f", 0x7, 0x800}]) [ 1084.192024] loop3: RDSK (0) [ 1084.192024] unable to read partition table [ 1084.200519] loop3: partition table beyond EOD, truncated [ 1084.206104] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f", 0x7, 0x800}]) [ 1084.353647] loop3: RDSK (0) [ 1084.353647] unable to read partition table [ 1084.361286] loop3: partition table beyond EOD, truncated [ 1084.366957] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 15:37:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8}]) 15:37:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8}]) 15:37:38 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f0000003800)=[{&(0x7f0000000000)="5244534bd7274f1f", 0x8}]) 15:37:38 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1084.710193] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.715490] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.870120] protocol 88fb is buggy, dev hsr_slave_0 [ 1084.875320] protocol 88fb is buggy, dev hsr_slave_1 [ 1084.921185] ip_tables: iptables: counters copy to user failed while replacing table 15:37:41 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x16) 15:37:41 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:41 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:41 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:41 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:41 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:41 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:41 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:41 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:41 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:41 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:42 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1089.030231] net_ratelimit: 21 callbacks suppressed [ 1089.030236] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.040302] protocol 88fb is buggy, dev hsr_slave_1 [ 1089.110163] protocol 88fb is buggy, dev hsr_slave_0 [ 1089.115425] protocol 88fb is buggy, dev hsr_slave_1 15:37:44 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x16) 15:37:44 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x8, @dev, 0xd}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000002c7, 0x0) 15:37:44 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:44 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:44 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:44 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000240)='b\n\x00\x00\x00', 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x45011, r1, 0x0) [ 1090.156247] ip_tables: iptables: counters copy to user failed while replacing table [ 1090.164413] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.164468] protocol 88fb is buggy, dev hsr_slave_1 15:37:44 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1081082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1081806) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x2000005) [ 1090.320136] protocol 88fb is buggy, dev hsr_slave_0 [ 1090.325348] protocol 88fb is buggy, dev hsr_slave_1 15:37:44 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:44 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:44 executing program 0: pipe(&(0x7f0000000240)) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:44 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) [ 1090.950143] protocol 88fb is buggy, dev hsr_slave_0 15:37:47 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, 0x0) tkill(r0, 0x16) 15:37:47 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:47 executing program 0: pipe(&(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:47 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:47 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:37:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) [ 1094.310183] net_ratelimit: 17 callbacks suppressed [ 1094.310188] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.320260] protocol 88fb is buggy, dev hsr_slave_1 [ 1094.470186] protocol 88fb is buggy, dev hsr_slave_0 [ 1094.475386] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.110151] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.115258] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.270139] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.275366] protocol 88fb is buggy, dev hsr_slave_1 [ 1095.350156] protocol 88fb is buggy, dev hsr_slave_0 [ 1095.355282] protocol 88fb is buggy, dev hsr_slave_1 15:37:50 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, 0x0) tkill(r0, 0x16) 15:37:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:37:50 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:50 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:50 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:50 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:50 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:51 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:51 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:37:51 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:51 executing program 1: pipe(&(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:53 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, 0x0) tkill(r0, 0x16) 15:37:53 executing program 1: pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:53 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:53 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:53 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:53 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:53 executing program 1: pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:53 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) [ 1099.362671] net_ratelimit: 18 callbacks suppressed [ 1099.362676] ip_tables: iptables: counters copy to user failed while replacing table 15:37:53 executing program 1: pipe(&(0x7f0000000240)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) [ 1099.430116] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.435272] protocol 88fb is buggy, dev hsr_slave_1 [ 1099.456658] ip_tables: iptables: counters copy to user failed while replacing table 15:37:53 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) [ 1099.510188] protocol 88fb is buggy, dev hsr_slave_0 [ 1099.515380] protocol 88fb is buggy, dev hsr_slave_1 15:37:53 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) [ 1100.550203] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.555395] protocol 88fb is buggy, dev hsr_slave_1 [ 1100.710168] protocol 88fb is buggy, dev hsr_slave_0 [ 1100.715336] protocol 88fb is buggy, dev hsr_slave_1 15:37:56 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(0x0, 0x16) 15:37:56 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:37:56 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:56 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:56 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:56 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 15:37:56 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:37:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:37:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:37:56 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:37:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 15:37:57 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(0x0, 0x16) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:57 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:57 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:57 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:37:57 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(0x0, 0x16) 15:37:58 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:58 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:58 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:58 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:58 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 3: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:58 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:58 executing program 3: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) [ 1104.710147] net_ratelimit: 19 callbacks suppressed [ 1104.710153] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.720465] protocol 88fb is buggy, dev hsr_slave_1 [ 1104.870207] protocol 88fb is buggy, dev hsr_slave_0 [ 1104.875372] protocol 88fb is buggy, dev hsr_slave_1 15:37:59 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x0) 15:37:59 executing program 3: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:59 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:59 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:59 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:59 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) [ 1105.172970] ip_tables: iptables: counters copy to user failed while replacing table 15:37:59 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) [ 1105.510168] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.515367] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.670155] protocol 88fb is buggy, dev hsr_slave_0 [ 1105.675309] protocol 88fb is buggy, dev hsr_slave_1 [ 1105.750581] protocol 88fb is buggy, dev hsr_slave_0 15:37:59 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x0) 15:37:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:37:59 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:37:59 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:37:59 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:00 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:00 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:38:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:00 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:38:00 executing program 5: r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r1, 0xa, 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) poll(&(0x7f0000b2c000)=[{r2}], 0x20000000000000c6, 0xffffffffffbffff8) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001300)='/dev/mISDNtimer\x00', 0x0, 0x0) dup2(r5, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x0) 15:38:00 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:00 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:00 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:01 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:01 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:01 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:01 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:01 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:01 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:01 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:01 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:01 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:01 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:01 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:02 executing program 4: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:02 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:02 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:02 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:02 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:02 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:02 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:02 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:02 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:38:02 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) getdents64(r1, 0x0, 0x0) 15:38:02 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:02 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) 15:38:03 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:03 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) 15:38:03 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) [ 1109.774598] net_ratelimit: 23 callbacks suppressed [ 1109.774602] ip_tables: iptables: counters copy to user failed while replacing table 15:38:03 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:03 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1109.830122] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.835401] protocol 88fb is buggy, dev hsr_slave_1 15:38:03 executing program 1: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:03 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) [ 1109.910163] protocol 88fb is buggy, dev hsr_slave_0 [ 1109.915346] protocol 88fb is buggy, dev hsr_slave_1 15:38:04 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:04 executing program 1: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:04 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) 15:38:04 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) 15:38:04 executing program 1: r0 = open(0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:04 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:04 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") 15:38:04 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:04 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:04 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") [ 1110.763044] ip_tables: iptables: counters copy to user failed while replacing table 15:38:04 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:04 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) [ 1110.950159] protocol 88fb is buggy, dev hsr_slave_0 [ 1110.955302] protocol 88fb is buggy, dev hsr_slave_1 [ 1111.110155] protocol 88fb is buggy, dev hsr_slave_0 [ 1111.115270] protocol 88fb is buggy, dev hsr_slave_1 15:38:05 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:05 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 15:38:05 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:05 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) 15:38:05 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:05 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:05 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15:38:05 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:05 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) 15:38:05 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents64(r0, 0x0, 0x0) 15:38:05 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) 15:38:05 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:06 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) 15:38:06 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:06 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:06 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) 15:38:06 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) 15:38:06 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:06 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:06 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x0, 0x1) getdents64(r0, 0x0, 0x0) 15:38:06 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) 15:38:06 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:06 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') 15:38:06 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:06 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) 15:38:06 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) getdents64(r0, 0x0, 0x0) 15:38:07 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:07 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) 15:38:07 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:07 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:38:07 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:07 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 15:38:07 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 15:38:08 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:08 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') 15:38:08 executing program 3: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) 15:38:08 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:08 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) 15:38:08 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:08 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:08 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30014065}, 0x44800) 15:38:08 executing program 5: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30014065}, 0x44800) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:38:08 executing program 1: madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$inet6(0xa, 0x3, 0x3) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents64(r1, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) creat(&(0x7f0000000180)='./file0\x00', 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="34e8cce68b959d7f81") openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000003c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x0) shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30014065}, 0x44800) dup2(0xffffffffffffffff, 0xffffffffffffffff) 15:38:08 executing program 5: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$packet(0x11, 0x4000000000000a, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) close(r0) 15:38:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1114.989240] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1115.110209] net_ratelimit: 20 callbacks suppressed [ 1115.110238] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.120361] protocol 88fb is buggy, dev hsr_slave_1 15:38:09 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1115.239209] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1115.263746] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1115.280130] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.285311] protocol 88fb is buggy, dev hsr_slave_1 [ 1115.327132] ip_tables: iptables: counters copy to user failed while replacing table 15:38:09 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:09 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:09 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1115.435703] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1115.456201] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1115.623650] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1115.920128] protocol 88fb is buggy, dev hsr_slave_0 [ 1115.925395] protocol 88fb is buggy, dev hsr_slave_1 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffe71, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r1, 0x0, 0x0) 15:38:10 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1116.070149] protocol 88fb is buggy, dev hsr_slave_0 [ 1116.075912] protocol 88fb is buggy, dev hsr_slave_1 [ 1116.150116] protocol 88fb is buggy, dev hsr_slave_0 15:38:10 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:10 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000010000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) 15:38:10 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:10 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1116.362892] EXT4-fs (loop5): fragment/cluster size (2048) != block size (1024) 15:38:10 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1116.454948] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1116.558695] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1116.623477] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:10 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:11 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:11 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:11 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1117.222329] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:11 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1117.270631] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1117.315059] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1117.361151] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:11 executing program 5: 15:38:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:11 executing program 5: 15:38:11 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1117.500275] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1117.618030] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:11 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = dup(0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 5: 15:38:12 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 5: 15:38:12 executing program 5: 15:38:12 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 5: 15:38:12 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 5: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:12 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:12 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:13 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1119.040464] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 15:38:13 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 15:38:13 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:13 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:13 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 15:38:13 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={0x40, 'set\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:14 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r2, r3, 0x0, 0xfffffffd) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={0x40, 'set\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={0x40, 'set\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) [ 1120.230190] net_ratelimit: 22 callbacks suppressed [ 1120.230196] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.240303] protocol 88fb is buggy, dev hsr_slave_1 [ 1120.310170] protocol 88fb is buggy, dev hsr_slave_0 [ 1120.315410] protocol 88fb is buggy, dev hsr_slave_1 15:38:14 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x240, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 15:38:14 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffe71, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="f46cbd20fd4b1cbce1a13485b90f59ea6f6ff7d1d49d49638713fdb1f9948a1c0b6f3fe3d61a2acf22d1366859278aeff3d7877b013f83663b0b10f2a41ede88514b50e870f171bf281675932c38887237a754b1bd142f633071c6621340274ad26fec3bca58a92c7a867327e91084834ea6e49a916be86a997789b25ceec3a9ff834cf36c1ffc120777c2f6d1216b5b23985b4d7df305bf6cdf43cc3b319f76429b45aa7ce56ebeb46a5d2968b8abe4ec5436fdd6b685ce3c63ca248d995177ac0d4bdc074e70f32c4e750b11fb6a240e770da692e8015ee679bc9a3bf1a852b280f5f673ac8f9fe986ee48fb7aeb7062de7224aad9966d454cc69a96", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) 15:38:14 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:14 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffe71, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="f46cbd20fd4b1cbce1a13485b90f59ea6f6ff7d1d49d49638713fdb1f9948a1c0b6f3fe3d61a2acf22d1366859278aeff3d7877b013f83663b0b10f2a41ede88514b50e870f171bf281675932c38887237a754b1bd142f633071c6621340274ad26fec3bca58a92c7a867327e91084834ea6e49a916be86a997789b25ceec3a9ff834cf36c1ffc120777c2f6d1216b5b23985b4d7df305bf6cdf43cc3b319f76429b45aa7ce56ebeb46a5d2968b8abe4ec5436fdd6b685ce3c63ca248d995177ac0d4bdc074e70f32c4e750b11fb6a240e770da692e8015ee679bc9a3bf1a852b280f5f673ac8f9fe986ee48fb7aeb7062de7224aad9966d454cc69a96", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) [ 1120.908761] ip_tables: iptables: counters copy to user failed while replacing table 15:38:14 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x250, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 15:38:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffe71, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) 15:38:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0xfffffe71, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendmsg$sock(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000780)="1f11c391ebb0498200c347e9bd47244fd3a5c023544bcb8aa2529d374448452e2f7b27efda85e330dc9220b9081ef4e1f31c0e632cad4fc988caf71b479bc6c8e1c31a471c76fcd44961d295561c906c7f45fb3d2197e86aa42fa237e4880e1c43f22ef649b1e31f8eac87aef5fd0dc37827e4d4c83a4b80dcc5b6d97b441cbfc8", 0x81}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="c97bead89525da49a6e9e27830e41ac4aa53b96bf12be3495b331e23ee0c4747d34977d8bf41ab9f082d981f820fa784fd2274ad3944d71110286a211b65db461de7cd29323b", 0x46}, {&(0x7f00000009c0)="9a97b4714716eac6000e39ae06bb1893e3abdb1c3bc5439ded8ec8258984d920fd5c16aa0e08751b24f01dfbe9739d021138fe06f497c78c21c8c2aeb603c16ad31d42ed3f239652eced63555f131fba39d3cb2bac97a366e5b3aacf5705ae4ae9bfece85d6c15f38cf83738cbd3d0648ceb04dceb7d968e12f6be4a7cf42dcaf8fc9ec5a4c44ce73338ead1d78e9054becf951dd58c56d458f90d69dad1bea60ac98f3ffc14fd9d7d0b984911e3d4e82eb41ec3236ac6f6460e4fb7", 0xfffffdd9}, {&(0x7f0000000a80)="8b392db9b7a4ffb8f4184472a38d4021e56db1c33c4b2b363aa62702ccc4c13a65eca09d69ea4a69debbb41b0862798f28174adb11b105f136e0410359c1f3cc0e1eebe2490039a3806968aaefe814e21ed9596058b3450a5784210b84cbc39cbac76865ea762634b394bf62656fed0bed1daf55aa352b13e45b08c63726b9956e3879922591e38b9f149cca01321d3ecc7bc5c261cbc774e2a2d45e54c61f", 0x9f}, {&(0x7f0000000b40)="cc0004b41ece4bba9770befebb3520104bd32c10a73f84e0c8c28fe2f74d57d8b3d514616ecb3d72ad882932e78da5", 0x2f}], 0x7}, 0x0) [ 1121.350214] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.355465] protocol 88fb is buggy, dev hsr_slave_1 [ 1121.510141] protocol 88fb is buggy, dev hsr_slave_0 [ 1121.515321] protocol 88fb is buggy, dev hsr_slave_1 15:38:15 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, 0xffffffffffffffff, 0x0) 15:38:15 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:15 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:15 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, 0xffffffffffffffff, 0x0) [ 1121.881069] ip_tables: iptables: counters copy to user failed while replacing table 15:38:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x0, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:15 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:15 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:16 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:16 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:16 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0x0, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:16 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:16 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:17 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:17 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:17 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:17 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:17 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:18 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:18 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:18 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:18 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:18 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:18 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x0, &(0x7f0000000040), 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:19 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x0, 0x0, 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:19 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:19 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:19 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:19 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1125.510136] net_ratelimit: 19 callbacks suppressed [ 1125.510142] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.520252] protocol 88fb is buggy, dev hsr_slave_1 [ 1125.618683] ip_tables: iptables: counters copy to user failed while replacing table 15:38:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 1125.670146] protocol 88fb is buggy, dev hsr_slave_0 [ 1125.675478] protocol 88fb is buggy, dev hsr_slave_1 15:38:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 15:38:19 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 15:38:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) 15:38:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 15:38:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x5, 0x24, 0x30, 0x0, 0x1, 0x4400, 0x227df0e8d8b577c0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, @perf_bp={&(0x7f0000000040), 0x1c}, 0x0, 0x4, 0x7fff, 0x572901ac7f6f38c8, 0x16, 0x3fc00, 0x7fff}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) 15:38:20 executing program 5: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xce7c, 0x83630, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbfffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0xf800000000000000) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820004, 0x0, 0x0, [0x0, 0xeca7020000000000, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}, 0x2c) socket$kcm(0x2, 0x2000000000003, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x7, 0x209e20, 0x8000000001}, 0x414) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0xae5c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77f7fb, 0x0, 0x82e700, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}, 0x2c) socket$kcm(0x2b, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) [ 1126.310137] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.315454] protocol 88fb is buggy, dev hsr_slave_1 15:38:20 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:20 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:20 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:20 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:20 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) [ 1126.470140] protocol 88fb is buggy, dev hsr_slave_0 [ 1126.475488] protocol 88fb is buggy, dev hsr_slave_1 15:38:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@cache_fscache='cache=fscache'}]}}) 15:38:20 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000), 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) [ 1126.550153] protocol 88fb is buggy, dev hsr_slave_0 15:38:20 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r1, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r3, 0x10, r4, 0x0) 15:38:20 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r3, 0x10, r4, 0x0) 15:38:20 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{0x0}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:20 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:20 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:21 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x4, 0x2000) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'syzkaller0\x00', {0x4}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x101, 0x1, 0x2, 0xed}, {0x4, 0x5, 0x4a, 0x2}]}) keyctl$chown(0x4, 0x0, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@shortname_winnt='shortname=winnt'}, {@shortname_win95='shortname=win95'}], [{@smackfsroot={'smackfsroot'}}, {@fowner_lt={'fowner<', r1}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@audit='audit'}, {@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r5}}]}) 15:38:21 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:21 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:21 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:21 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:21 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0x0) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(0x0, 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:21 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) [ 1127.744567] 9pnet: Insufficient options for proto=fd 15:38:22 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:22 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:22 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:22 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:22 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:22 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:22 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) [ 1128.466570] 9pnet: Insufficient options for proto=fd 15:38:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="5d6be208e3772a0ec58ba3c1572369ebd808026f372f86fbc7aff016608293059d2d2e94ccd01c8945b88b446e013e0c6449b91c783859e28ea29a85f020a9922e8e0b734fe78a624f54e4e622947cabe6c936f565b4b26559ac5b1bba9707d0f591cb58ce331a86e141ed3fd06d39047c0a9f9f4cb3ee850d41895c8a7fc73c02f3be7f5026992fb49b669fe27ace77ac46b48b5b165cdaf7377ba21a27fb39fe463046d8ea3981934087745393407afc784f4d37f0653ba342bcae6c0ee0ee1dbb5b675f0c59f754b4029ef6c88567472e65e94c4d", 0xd6}, {&(0x7f00000004c0)="a66e6bf608c6652aa0318b29b252c88534fdcfdc10d29c415e350389f80f72522b99beca94d193dca2cac00cd99487e1198104c831b210f3e2a68e0452ec36fabd1a3d5d24470d73b4cf2d3bde60ef6d40d12d4d4753f656cc85b991257937e61c1f35a5d8c5deed67623dcda1363b6aebdaa813f27a1cdfb9f271963f73b592b8398b4f1c85c53f935524d68925cd8f1b19bbe70ed4457da660db0a3cdfbbc7e9849f1681de2c9b02b26e30a938a4ac471d7dc8ea54", 0xb6}, {&(0x7f0000000580)="48b7645b1cd8497b5d5a338710a4183a538e0a1991e71b04c20b9388b4590e5aea1b9b3e1e6ff326aa97103e2e96b9e2614f6f2340eab28b3c3e43b79aa5a34cc948ea69e6b394c7aaa65292a4aedb0af31e64c317c2d1f5dd1d5c7b85aecd10f74256edd9a16ab7c6c6944dcf2a1957c7ff64f3e1c9e4aa9b16d91a0235fe55d1febc118daa945150eb35712553b2307aa2990ab3026d6acfb07cbf49dfcf5faf376bce01d4711698ab1c0b65dff2308216b831a53014f63f72e05af5e52d2e42d0f78906a1a825e1272f5ac8d787c2c2d5e9c04e3840357a91aeb8085dcd41028c535d85ed7d80", 0xe8}, {&(0x7f0000000240)="7a147172ac3a2cac26c62474532df2a1558d4276551e2ba6898cc74646cd0e9d717d8371eb5b989eeebd6b2c2e627fefb032f76e4e2fb842bd7eea93771f", 0x3e}, {&(0x7f0000000680)="58aaeadab2b94fb6c5ffb1e0657a044943aba15982ad035ea94d2b3be7c6bd0af49c9861cc1a6f84999a4ffb678d21210951f48f964e34c09e0ff94c97f74458b483f4fd57d02d8f6e6ce2f12b1a59d5c8cca369a5fff0c92e850ca0580824ba0820f05abd310b1609e15e97f047b4bad96c811819c6f0e5ea6aa8dbd5c5b94225748001ead9e9bd9786096fe674bceea8a63e27340c0ec8a3f7", 0x9a}, {&(0x7f0000000740)="0907b2eed188f8ef4ea98c11e7bb2929a958e16abbba2e51c627d5f649f65b72d7b5f5c57b129c6f3e6bb44df22d4fad7fc292716a3ef866cb52255ead419388d2cb67337ba9d892ecccdcc5f6b221eee000188e5c3c635cf1d811a44f2466bab19c7475718ac3720642688a0e06ad33078b77e0d6504bb6bdf62e718de935807cfce276deae54c7b2573c03559549b9b0b112edd385e11830758b5ce316ac559a1432c6218b471da068c6a7ba13bc582b7ff9b1c3", 0xb5}], 0x6, 0x0, 0x0, 0x1b38474bc3124b1a}, 0x4008080) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0xce, 0x400, 0x7, 0x5}, 'syz0\x00', 0x27}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000001c0)={0x0, 0x4}, 0x2) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0xc5f69b539aa2fca1, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x76, &(0x7f0000000140)={r8}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r8, 0x80}, &(0x7f0000000140)=0x8) flock(r0, 0x2) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 15:38:22 executing program 5: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:22 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:23 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:23 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r0 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r1, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r3, 0x10, r4, 0x0) 15:38:23 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:23 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:23 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:23 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r3, 0x10, r4, 0x0) 15:38:23 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) [ 1130.630149] net_ratelimit: 21 callbacks suppressed [ 1130.630155] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.640229] protocol 88fb is buggy, dev hsr_slave_1 [ 1130.710890] protocol 88fb is buggy, dev hsr_slave_0 [ 1130.716039] protocol 88fb is buggy, dev hsr_slave_1 15:38:25 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() waitid(0x5, 0x0, &(0x7f00000002c0), 0x7, &(0x7f00000006c0)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RREADDIR(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:25 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:25 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:25 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:25 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:25 executing program 5: mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x121) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}]}) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = semget$private(0x0, 0x2000000010a, 0x0) semop(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x2000}], 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) close(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@loopback, @in6=@mcast2, 0x4e20, 0x5, 0x4e21, 0x0, 0xa, 0x80, 0x30, 0x62, 0x0, r4}, {0x3f, 0x5, 0x4, 0x0, 0x8, 0x9, 0x90000000000}, {0x1, 0x7fffffff, 0x1, 0x8}, 0x8000, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x4d6, 0x3c}, 0x2, @in=@local, 0x0, 0x2, 0x3, 0x0, 0x1, 0x6, 0x7}}, 0xe8) semctl$GETPID(r1, 0x1, 0xb, &(0x7f0000000140)=""/212) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000340)={0x4, 0x0, 0x1009, 0x5, 0x78f, 0xd88, 0x1ff}) r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x8, 0x400000) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0106401, &(0x7f00000002c0)={0xec, &(0x7f00000003c0)=""/236}) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000100)={0x5c468155, 0x8}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x60040) [ 1131.547764] ip_tables: iptables: counters copy to user failed while replacing table 15:38:25 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ee182442360693b67e10689690179c57", 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="73686f72746e61ed653d77696f6e742c73686f72746e616d653d6c6f7765722c00"]) 15:38:25 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ee182442360693b67e10689690179c57", 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="73686f72746e61ed653d77696f6e742c73686f72746e616d653d6c6f7765722c00"]) 15:38:25 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ee182442360693b67e10689690179c57", 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="73686f72746e61ed653d77696f6e742c73686f72746e616d653d6c6f7765722c00"]) [ 1131.750151] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.755357] protocol 88fb is buggy, dev hsr_slave_1 15:38:25 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ee182442360693b67e10689690179c57", 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:25 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="ee182442360693b67e10689690179c57", 0x10) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1131.910151] protocol 88fb is buggy, dev hsr_slave_0 [ 1131.915329] protocol 88fb is buggy, dev hsr_slave_1 [ 1132.550161] protocol 88fb is buggy, dev hsr_slave_0 15:38:28 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 15:38:28 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1c, 0x80000) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:28 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:28 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:28 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:28 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:28 executing program 5: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:28 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:28 executing program 5: syslog(0x0, &(0x7f00000000c0)=""/224, 0xe0) 15:38:28 executing program 5: syslog(0x0, &(0x7f00000000c0)=""/224, 0xe0) 15:38:28 executing program 5: syslog(0x0, &(0x7f00000000c0)=""/224, 0xe0) [ 1134.717781] audit: type=1400 audit(1576769908.669:197): avc: denied { syslog } for pid=3692 comm="syz-executor.5" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 15:38:28 executing program 5: syslog(0x3, 0x0, 0x0) [ 1135.910172] net_ratelimit: 16 callbacks suppressed [ 1135.910176] protocol 88fb is buggy, dev hsr_slave_0 [ 1135.920290] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.080186] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.085376] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.710152] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.715274] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.880120] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.885269] protocol 88fb is buggy, dev hsr_slave_1 [ 1136.960209] protocol 88fb is buggy, dev hsr_slave_0 [ 1136.965370] protocol 88fb is buggy, dev hsr_slave_1 15:38:31 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() waitid(0x5, 0x0, &(0x7f00000002c0), 0x7, &(0x7f00000006c0)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x2000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x0, 0x2, {0x80000000}, 0xfffff6f8, 0x20}}) pipe(&(0x7f0000000840)={0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x13f}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) dup2(0xffffffffffffffff, r3) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:31 executing program 5: syslog(0x3, 0x0, 0x0) 15:38:31 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:31 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:31 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:31 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:31 executing program 5: syslog(0x3, 0x0, 0x0) 15:38:31 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r1, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r3, 0x10, r4, 0x0) [ 1137.707627] 9pnet: Insufficient options for proto=fd [ 1137.715656] 9pnet: Insufficient options for proto=fd 15:38:31 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() waitid(0x5, 0x0, &(0x7f00000002c0), 0x7, &(0x7f00000006c0)) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x2000) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x0, 0x2, {0x80000000}, 0xfffff6f8, 0x20}}) pipe(&(0x7f0000000840)={0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x10) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x13f}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RREADDIR(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_loose='cache=loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_none='cache=none'}, {@cache_fscache='cache=fscache'}]}}) 15:38:32 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:32 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:32 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:32 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:32 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:32 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) 15:38:32 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 15:38:32 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 15:38:32 executing program 5 (fault-call:0 fault-nth:0): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1138.935925] FAULT_INJECTION: forcing a failure. [ 1138.935925] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.947701] CPU: 1 PID: 3776 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1138.955520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1138.964910] Call Trace: [ 1138.967529] dump_stack+0x142/0x197 [ 1138.971185] should_fail.cold+0x10f/0x159 [ 1138.975351] should_failslab+0xdb/0x130 [ 1138.979347] kmem_cache_alloc_trace+0x2e9/0x790 15:38:32 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0xbaf3fb7d510b0c0f, 0xde528c31fb53374b) r2 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='f', 0x1, 0xfffffffffffffffd) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000140)=0x3, 0x1) keyctl$read(0xb, r2, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, 0x0) request_key(0x0, &(0x7f0000000180)={'\x00', 0x0}, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x3d, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x7, @perf_config_ext={0x0, 0x200}, 0x5046, 0x5, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000500)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x200, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x3, 0x70, 0x3f, 0xff, 0x7, 0xff, 0x0, 0x5, 0x10812, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xaa29, 0x1, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x20000000000000, 0x4, 0x3, 0x7, 0x9, 0x9}, r4, 0x10, r5, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 1138.984041] syslog_print_all+0x55/0x790 [ 1138.988144] ? selinux_syslog+0x1a4/0x2c0 [ 1138.992309] ? security_syslog+0x79/0xa0 [ 1138.996394] do_syslog+0x16b/0xb60 [ 1139.000054] ? __sb_end_write+0xc1/0x100 [ 1139.004260] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1139.009300] ? fput+0xd4/0x150 [ 1139.009311] ? SyS_write+0x15e/0x230 [ 1139.009328] SyS_syslog+0x26/0x30 [ 1139.009336] ? do_syslog+0xb60/0xb60 [ 1139.009349] do_syscall_64+0x1e8/0x640 [ 1139.009359] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:38:33 executing program 5 (fault-call:0 fault-nth:1): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1139.009379] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.009388] RIP: 0033:0x45a919 [ 1139.009397] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 [ 1139.019733] ORIG_RAX: 0000000000000067 [ 1139.019741] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1139.019747] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1139.019752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.019757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1139.019762] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1139.133466] FAULT_INJECTION: forcing a failure. [ 1139.133466] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.145871] CPU: 0 PID: 3783 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1139.153868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.163238] Call Trace: [ 1139.165919] dump_stack+0x142/0x197 [ 1139.169546] should_fail.cold+0x10f/0x159 [ 1139.173852] should_failslab+0xdb/0x130 [ 1139.177857] kmem_cache_alloc+0x2d7/0x780 [ 1139.182214] ? __might_sleep+0x93/0xb0 [ 1139.186199] __anon_vma_prepare+0x62/0x390 [ 1139.190442] do_huge_pmd_anonymous_page+0xc9d/0x1200 [ 1139.195551] ? __lock_is_held+0xb6/0x140 [ 1139.199606] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1139.204484] ? pmd_val+0xe0/0xe0 [ 1139.207865] __handle_mm_fault+0x247d/0x33d0 [ 1139.212272] ? copy_page_range+0x1de0/0x1de0 [ 1139.216672] ? find_held_lock+0x35/0x130 [ 1139.220736] ? handle_mm_fault+0x1b6/0x7c0 [ 1139.224984] handle_mm_fault+0x293/0x7c0 [ 1139.229044] __do_page_fault+0x4c1/0xb80 [ 1139.233113] ? vmalloc_fault+0xe30/0xe30 [ 1139.237196] do_page_fault+0x71/0x511 [ 1139.241066] page_fault+0x25/0x50 [ 1139.251665] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1139.257541] RSP: 0018:ffff8882091f7d28 EFLAGS: 00010206 [ 1139.262999] RAX: ffffed10129aaf72 RBX: 000000000000004a RCX: 000000000000004a [ 1139.270266] RDX: 000000000000004a RSI: ffff888094d57b40 RDI: 00000000200000c0 [ 1139.277529] RBP: ffff8882091f7d58 R08: 1ffff110129aaf68 R09: ffffed10129aaf72 [ 1139.284795] R10: ffffed10129aaf71 R11: ffff888094d57b89 R12: 00000000200000c0 [ 1139.292080] R13: ffff888094d57b40 R14: 00007ffffffff000 R15: 000000002000010a [ 1139.299461] ? _copy_to_user+0xb1/0xd0 [ 1139.303483] syslog_print_all+0x48e/0x790 [ 1139.307695] do_syslog+0x16b/0xb60 [ 1139.311244] ? __sb_end_write+0xc1/0x100 [ 1139.315308] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1139.320315] ? fput+0xd4/0x150 [ 1139.323602] ? SyS_write+0x15e/0x230 [ 1139.327309] SyS_syslog+0x26/0x30 [ 1139.330750] ? do_syslog+0xb60/0xb60 [ 1139.334461] do_syscall_64+0x1e8/0x640 [ 1139.338342] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.343248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.348498] RIP: 0033:0x45a919 [ 1139.351816] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1139.359622] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1139.366935] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1139.374229] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:38:33 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:33 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1139.381664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1139.389008] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:33 executing program 5 (fault-call:0 fault-nth:2): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:33 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:33 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:33 executing program 1 (fault-call:3 fault-nth:0): clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1139.583644] FAULT_INJECTION: forcing a failure. [ 1139.583644] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.619039] CPU: 1 PID: 3798 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1139.619676] FAULT_INJECTION: forcing a failure. [ 1139.619676] name failslab, interval 1, probability 0, space 0, times 0 [ 1139.626882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.627010] Call Trace: [ 1139.650265] dump_stack+0x142/0x197 [ 1139.653901] should_fail.cold+0x10f/0x159 [ 1139.658044] should_failslab+0xdb/0x130 [ 1139.662018] kmem_cache_alloc+0x2d7/0x780 [ 1139.666187] ? anon_vma_compatible+0x62/0x2a0 [ 1139.670713] __anon_vma_prepare+0x1b1/0x390 [ 1139.675033] do_huge_pmd_anonymous_page+0xc9d/0x1200 [ 1139.680132] ? __lock_is_held+0xb6/0x140 [ 1139.684207] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1139.688950] ? pmd_val+0xe0/0xe0 [ 1139.692313] __handle_mm_fault+0x247d/0x33d0 [ 1139.696726] ? copy_page_range+0x1de0/0x1de0 [ 1139.701126] ? find_held_lock+0x35/0x130 [ 1139.705181] ? handle_mm_fault+0x1b6/0x7c0 [ 1139.709425] handle_mm_fault+0x293/0x7c0 [ 1139.713479] __do_page_fault+0x4c1/0xb80 [ 1139.717538] ? vmalloc_fault+0xe30/0xe30 [ 1139.721624] do_page_fault+0x71/0x511 [ 1139.725427] page_fault+0x25/0x50 [ 1139.728867] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1139.734739] RSP: 0018:ffff888215537d28 EFLAGS: 00010206 [ 1139.740095] RAX: ffffed100ed3dada RBX: 000000000000004a RCX: 000000000000004a [ 1139.747358] RDX: 000000000000004a RSI: ffff8880769ed680 RDI: 00000000200000c0 [ 1139.754624] RBP: ffff888215537d58 R08: 1ffff1100ed3dad0 R09: ffffed100ed3dada [ 1139.761912] R10: ffffed100ed3dad9 R11: ffff8880769ed6c9 R12: 00000000200000c0 [ 1139.769199] R13: ffff8880769ed680 R14: 00007ffffffff000 R15: 000000002000010a [ 1139.776484] ? _copy_to_user+0xb1/0xd0 [ 1139.780377] syslog_print_all+0x48e/0x790 [ 1139.784534] do_syslog+0x16b/0xb60 [ 1139.788073] ? __sb_end_write+0xc1/0x100 [ 1139.792141] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1139.797168] ? fput+0xd4/0x150 [ 1139.800808] ? SyS_write+0x15e/0x230 [ 1139.804534] SyS_syslog+0x26/0x30 [ 1139.808069] ? do_syslog+0xb60/0xb60 [ 1139.811786] do_syscall_64+0x1e8/0x640 [ 1139.815667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.820524] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.825741] RIP: 0033:0x45a919 [ 1139.828932] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1139.836729] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1139.843989] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1139.851245] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1139.858504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1139.865762] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1139.873042] CPU: 0 PID: 3805 Comm: syz-executor.1 Not tainted 4.14.159-syzkaller #0 [ 1139.881071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1139.890448] Call Trace: [ 1139.893297] dump_stack+0x142/0x197 [ 1139.896916] should_fail.cold+0x10f/0x159 [ 1139.901073] should_failslab+0xdb/0x130 [ 1139.905047] kmem_cache_alloc_node_trace+0x280/0x770 [ 1139.910141] __kmalloc_node+0x3d/0x80 [ 1139.913926] kvmalloc_node+0x4e/0xe0 [ 1139.917699] xt_alloc_table_info+0x71/0xf0 [ 1139.921975] do_ipt_set_ctl+0x1eb/0x3ee [ 1139.925938] ? compat_do_ipt_set_ctl+0x150/0x150 [ 1139.930692] ? mutex_unlock+0xd/0x10 [ 1139.934442] ? nf_sockopt_find.constprop.0+0x1b7/0x230 [ 1139.939708] nf_setsockopt+0x67/0xc0 [ 1139.943414] ip_setsockopt+0x9b/0xb0 [ 1139.947125] udp_setsockopt+0x4e/0x90 [ 1139.950946] ipv6_setsockopt+0x9e/0x130 [ 1139.954908] tcp_setsockopt+0x84/0xd0 [ 1139.958710] sock_common_setsockopt+0x94/0xd0 [ 1139.963205] SyS_setsockopt+0x13c/0x210 [ 1139.967167] ? SyS_recv+0x40/0x40 [ 1139.970609] ? do_syscall_64+0x53/0x640 [ 1139.974576] ? SyS_recv+0x40/0x40 [ 1139.978016] do_syscall_64+0x1e8/0x640 [ 1139.981901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1139.986748] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1139.991920] RIP: 0033:0x45a919 [ 1139.995097] RSP: 002b:00007f29424b8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1140.002794] RAX: ffffffffffffffda RBX: 00007f29424b8c90 RCX: 000000000045a919 [ 1140.010049] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 1140.017307] RBP: 000000000075bf20 R08: 00000000000002e0 R09: 0000000000000000 [ 1140.024563] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f29424b96d4 15:38:34 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000340)={0x1c, 0x7, 0x2, {0x13, 'cpusetwlan1vboxnet1'}}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=ANY=[], 0x0) [ 1140.031818] R13: 00000000004c9cb1 R14: 00000000004e1e38 R15: 0000000000000005 15:38:34 executing program 5 (fault-call:0 fault-nth:3): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:34 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x98, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0x1fe, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00', {}, {}, 0x4}, 0x0, 0xffffffffffffffe6, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @unspec=@TRACE={0x0, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x64) [ 1140.173939] FAULT_INJECTION: forcing a failure. [ 1140.173939] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.185629] CPU: 0 PID: 3822 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1140.193448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.202817] Call Trace: [ 1140.202837] dump_stack+0x142/0x197 [ 1140.202856] should_fail.cold+0x10f/0x159 [ 1140.202875] should_failslab+0xdb/0x130 [ 1140.209067] kmem_cache_alloc+0x2d7/0x780 [ 1140.209088] __khugepaged_enter+0x37/0x340 [ 1140.209101] do_huge_pmd_anonymous_page+0xd3d/0x1200 [ 1140.209116] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1140.235446] ? pmd_val+0xe0/0xe0 [ 1140.238834] __handle_mm_fault+0x247d/0x33d0 [ 1140.243266] ? copy_page_range+0x1de0/0x1de0 [ 1140.247690] ? find_held_lock+0x35/0x130 [ 1140.251768] ? handle_mm_fault+0x1b6/0x7c0 [ 1140.256029] handle_mm_fault+0x293/0x7c0 [ 1140.260107] __do_page_fault+0x4c1/0xb80 [ 1140.264187] ? vmalloc_fault+0xe30/0xe30 [ 1140.268262] do_page_fault+0x71/0x511 [ 1140.271987] Cannot find set identified by id 0 to match [ 1140.272071] page_fault+0x25/0x50 [ 1140.280882] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1140.286780] RSP: 0018:ffff888208b7fd28 EFLAGS: 00010206 [ 1140.292149] RAX: ffffed1012be8f6a RBX: 000000000000004a RCX: 000000000000004a [ 1140.299615] RDX: 000000000000004a RSI: ffff888095f47b00 RDI: 00000000200000c0 [ 1140.306889] RBP: ffff888208b7fd58 R08: 1ffff11012be8f60 R09: ffffed1012be8f6a [ 1140.314685] R10: ffffed1012be8f69 R11: ffff888095f47b49 R12: 00000000200000c0 15:38:34 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000400)={0xa030, 0x6, 0x800, 0x400}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) sendto(r4, &(0x7f00000004c0)="61a753d451c8415628ecd363ddc927041bc9a7f5a8919a3e6ee0d3fff99a822a9aebb6a377dc231d8385e6c9288542ecfb3651f68c67291f82d82aeab4f2ff08583b9b1894a93a37c619e25fa63d8dfe6dd7157f2b8d2ba4315f242799f68755e4cc0b0449a5445c71c285011f51", 0x6e, 0x8000, 0x0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuacct.stat\x00', 0x0, 0x0) mq_timedsend(r5, &(0x7f0000000380)="694c51ec179a1b6d5e282aa721bf2b211017e3304980a8fa3e4adc29d8658c2f594468dbb35eb05b75ca8c24ba6be8dedf21980939e87b63858d29b8af146a3646f376d0bbae2ee6baa92d8aef73e4b236", 0x51, 0x7, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xc8, 0x0, 0xc8, 0xc8, 0xc8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfffff801}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:34 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/736], 0x2e0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000015c0)={0xc, 0x8, 0xfa00, {&(0x7f0000001440)}}, 0x10) preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000013c0)=@filter={'filter\x00', 0xe, 0x5, 0x1046, [0x0, 0x20000340, 0x20000c9e, 0x200010ea], 0x0, &(0x7f0000000000), &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000050000001c000000886c6970365f7674693000000000000000006272696467653000000000000000000065727370616e30000000000000000000626373663000000000000000000000001db37ab265cf80ff00ff0100aaaaaaaaaabbc300ffa0ff0086080000fe0800002e0900007533320000000000000000000000000000000000000000000000000000000000c00700000000000080000000000000000700000003000000a800000002000000ff0300000300000001000000010000008d030000020000000600000001000000000001000000000006000000cf00000007000000020000000000ffff020000000600000005000000200000000100000008000000090000000000000002000000319f174a06000000f8ffffff6e05000002000000f8ffffff000000000800000008000000000800006ee2754b0000a00000000000040000000006000001000000030000000000010000000000070000000200000002000000010000000500000002000000e6000000020000000000000000000000018000000200000009000000a5000000070000000300000018d2000002000000b1a20000530e000004000000010000000800000007000000090000003f00000001000000cf00000020000000010000000200000000000000008000000500000000020000ff030000280a000008000000ffffff7f01010000000a00000008000003000000060000000000000001800000010000000600000003000000020000000100000002000000000000000400000001000000f9ffffff030000000300000000000000ea04000003000000ff19ffff010000000101000002000000800000000300000000010000f0bb00000000000004000000010000000300000002000000050000004000000097060000ffffff7f0800000000000010ffffffff1f000000040000000400000001000000090b0000090000000000000004000000010000000300000001000000010000001d000000940000000000000005000000030000000800000002000000000000000100000008000000020000000800000000000000ffff000003000000090000000500000004000000a2000000ff0f000000000000274c0000040000000100008001000000010000009649554c060000000700000081000000b51e0000820000000500000007000000feffffff02000000d8d6000009070000000000000000000000000100010000000600000002000000070000000200000006000000bc00000000000000030000001f0000000000000007000000030000001f000000000000000010000000000000ffffffff0100000004000000ff000000e6000000ff030000ffff0000f9ffffff090000000800000001000000040000008ee8000009000000070000000100000001000000ff0f00000000000008000000000000000400000000100000ff0100000b0000000200000003000000930500000100000001000000020000000900000000000000060000000100000000000000000000000200000001000000420c000000000000050000000100000028f4ffff05000000feffffff000000000600000067b900000900000000100000ff7f00000900000000040000ff0100008b7d0000090000000400000008000000ad0a00000400000003000000050000000100000008000000200000000300000001000000090000000806000072410000020000000400000002000000050000000300000005000000000000000008000002000000020000000000000004000000010000000900000003000000ff7f0000010000001c00000000000000080000000000000003000000060000000180000001000100859e000004000000000000000600000001000000b45b000002000000730600000600000002000000f8ffffff94000000020000004affffff1f000000080000009588797401000000010b000007000000000000000700000002000000008000000000000005000000010000000100008001000000040000000000000003000000000000000600000003000000090000000200000012f0ffff020000000500000001000000800000000400000006000000d80000005d84000040000000060000000000000000000000feffffff030000000100008001000000170000001f000000ff00000009000000ffffff7f01010000000000005706dc542a0000000304000000000100010000000300000003000000090000000200000081000000020000000400000000000000200000000300000008000000000000002000000004000000ff0f000093000000ff03000002000000010100000300000051000000990000007ab4bf7f00000100070000000500000001000000070000000100000000010000090000002100000000040000030000000005000021667a1a0300000009000000ffffffff09000000ac0600000500000009000000e20000000100000005000000020000000000000000000000ff0100000200000004000000000000000800000001000000070000000300000009000000010000000180000002000000000001000100000006000000000000007f00000000fcffff09000000fa00000002000000ff7f000001010000fbffffff77f9ffff0200000004000000c10100004ca27d6d010400000700000009000000ff000000010000000000010040000000ff030000010001000b0400000900000001000000040000000300000006000000000000000800000001000000040000000100000008000000020000001f00000000000000ffff000002000000060000000000000005000000000000000700000034000000682100000900000056f4ffff00000000ffffffff00000000200000000900000000000100090000000100000008000000ff030000000200000800000086cd0000ff01000000000000050000000600000005100000080000000004000000010000737461746500000000000000000000000000000000000000000000000000000008000000000000003e7b000000000000434c415353494659000000000000000000000000000000000000000000000000080000000000000000020000000000004552524f520000000000000000000000000000000000000000000900000000002000000000000000151a993313d12bd47e5fda19f613f38c03529ee6d378e0b05a9d40781f81000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002000000050000000400000088636970366772657461703000000000000076657468305f746f5f7465616d0000007465616d300000000000000000000000697036746e6c30000000000000000000aaaaaaaaaa0effff000000ff0180c20000000100000000ff6e000000ce010000fe0100004155444954000000000000000000000000000000000000000000000000000000080000000000000000000000000000005345434d41524b00000000000000000000000000000000000000000000000000080100000000000001000000ff7f000073797374656d5f753a6f626a6563745f723a68616c645f6463636d5f657865635f743a7330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000004000000000000090000002800000000196263736830000000000000000000000074756e6c300000000000000000000000766c616e30000000000000000000000076657468310000000000000000000000ffffffffffff7e00000081ffaaaaaaaaaa25ff000000feff6e000000d60100001e0200006d61726b0000000000000000000000000000000000000000000000000000000010000000000000002000000000000000ffffffff000000005345434d41524b000000000000000000000000000000000000000000000000000801000000000000010000000700000073797374656d5f753a6f626a6563745f723a7661725f617574685f743a73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a300000000000000000000000000380000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff02000000050000000400000060016272696467653000000000000000000079616d3000000000000000000000000073797a6b616c6c657231000000000000aaaaaaaaaabbfeff2fff0000ffffffffffff000000ffff80ee000000ee0000001e01000064657667726f7570000000000000000000000000000000000000000000000000180000000000000009000000ff0000001600000001000000050000000000000064657667726f7570000000000000000000000000000000000000000000000000180000000000000010000000000000008100000004000000db0f00000000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000000000086bb830b809b76657468305f746f5f7465616d0000006263736630000000000000000000000069726c616e300000000000000000000076657468315f746f5f7465616d0000000000000000000000ffffff002b83c52f2d01ffff00ff00ff9e0000001e0100004e0100003830325f330000000000000000000000000000000000000000000000000000000800000000000000ba000003020600004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a310000000000000000000000000000000000000000000000010600000007000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000b200000000000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000800000000000000"]}, 0x10ae) 15:38:34 executing program 1: clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1140.322038] R13: ffff888095f47b00 R14: 00007ffffffff000 R15: 000000002000010a [ 1140.322070] ? _copy_to_user+0xb1/0xd0 [ 1140.322085] syslog_print_all+0x48e/0x790 [ 1140.322102] do_syslog+0x16b/0xb60 [ 1140.322114] ? __sb_end_write+0xc1/0x100 [ 1140.345282] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1140.350321] ? fput+0xd4/0x150 [ 1140.353530] ? SyS_write+0x15e/0x230 [ 1140.357355] SyS_syslog+0x26/0x30 [ 1140.360949] ? do_syslog+0xb60/0xb60 [ 1140.364684] do_syscall_64+0x1e8/0x640 [ 1140.368591] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:38:34 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:34 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:34 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) [ 1140.373460] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1140.373470] RIP: 0033:0x45a919 [ 1140.373475] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1140.373485] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1140.373491] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1140.373496] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1140.373502] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1140.373508] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:34 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:34 executing program 5 (fault-call:0 fault-nth:4): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1140.576098] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1140.583052] FAULT_INJECTION: forcing a failure. [ 1140.583052] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1140.596983] CPU: 1 PID: 3857 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1140.604802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.614184] Call Trace: [ 1140.616800] dump_stack+0x142/0x197 [ 1140.620461] should_fail.cold+0x10f/0x159 [ 1140.624637] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1140.629313] ? __khugepaged_enter+0x256/0x340 [ 1140.633838] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1140.638913] alloc_pages_vma+0x322/0x4c0 [ 1140.643311] do_huge_pmd_anonymous_page+0x389/0x1200 [ 1140.648438] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1140.653209] ? pmd_val+0xe0/0xe0 [ 1140.656598] __handle_mm_fault+0x247d/0x33d0 [ 1140.661034] ? copy_page_range+0x1de0/0x1de0 [ 1140.665458] ? find_held_lock+0x35/0x130 [ 1140.669553] ? handle_mm_fault+0x1b6/0x7c0 [ 1140.673903] handle_mm_fault+0x293/0x7c0 [ 1140.677984] __do_page_fault+0x4c1/0xb80 [ 1140.682068] ? vmalloc_fault+0xe30/0xe30 [ 1140.686333] do_page_fault+0x71/0x511 [ 1140.690147] page_fault+0x25/0x50 [ 1140.693608] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1140.699509] RSP: 0018:ffff888209f0fd28 EFLAGS: 00010206 [ 1140.704884] RAX: ffffed100778f9be RBX: 000000000000006d RCX: 000000000000006d [ 1140.712182] RDX: 000000000000006d RSI: ffff88803bc7cd80 RDI: 00000000200000c0 [ 1140.719467] RBP: ffff888209f0fd58 R08: 1ffff1100778f9b0 R09: ffffed100778f9be [ 1140.727277] R10: ffffed100778f9bd R11: ffff88803bc7cdec R12: 00000000200000c0 [ 1140.734558] R13: ffff88803bc7cd80 R14: 00007ffffffff000 R15: 000000002000012d [ 1140.741892] ? _copy_to_user+0xb1/0xd0 [ 1140.745808] syslog_print_all+0x48e/0x790 [ 1140.749986] do_syslog+0x16b/0xb60 [ 1140.753533] ? __sb_end_write+0xc1/0x100 [ 1140.757604] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1140.762637] ? fput+0xd4/0x150 [ 1140.765842] ? SyS_write+0x15e/0x230 [ 1140.769566] SyS_syslog+0x26/0x30 [ 1140.773036] ? do_syslog+0xb60/0xb60 [ 1140.776759] do_syscall_64+0x1e8/0x640 [ 1140.780665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1140.785536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1140.790729] RIP: 0033:0x45a919 [ 1140.793920] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1140.801640] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1140.808931] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1140.817682] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 15:38:34 executing program 5 (fault-call:0 fault-nth:5): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1140.824954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1140.832407] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1140.904935] FAULT_INJECTION: forcing a failure. [ 1140.904935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1140.918140] CPU: 0 PID: 3867 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1140.926123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1140.935529] Call Trace: [ 1140.938137] dump_stack+0x142/0x197 [ 1140.941858] should_fail.cold+0x10f/0x159 [ 1140.946099] ? __might_sleep+0x93/0xb0 [ 1140.950022] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1140.955148] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1140.960199] alloc_pages_current+0xec/0x1e0 [ 1140.964539] pte_alloc_one+0x1a/0x100 [ 1140.968342] __pte_alloc+0x2a/0x2d0 [ 1140.971990] __handle_mm_fault+0x29fc/0x33d0 [ 1140.976401] ? copy_page_range+0x1de0/0x1de0 [ 1140.981064] ? find_held_lock+0x35/0x130 [ 1140.985133] ? handle_mm_fault+0x1b6/0x7c0 [ 1140.989389] handle_mm_fault+0x293/0x7c0 [ 1140.993450] __do_page_fault+0x4c1/0xb80 [ 1140.997523] ? vmalloc_fault+0xe30/0xe30 [ 1141.001713] do_page_fault+0x71/0x511 [ 1141.005520] page_fault+0x25/0x50 [ 1141.008975] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1141.014949] RSP: 0018:ffff8882065e7d28 EFLAGS: 00010206 [ 1141.020524] RAX: ffffed1014c03eda RBX: 000000000000004a RCX: 000000000000004a [ 1141.027801] RDX: 000000000000004a RSI: ffff8880a601f680 RDI: 00000000200000c0 [ 1141.035081] RBP: ffff8882065e7d58 R08: 1ffff11014c03ed0 R09: ffffed1014c03eda [ 1141.042447] R10: ffffed1014c03ed9 R11: ffff8880a601f6c9 R12: 00000000200000c0 [ 1141.049870] R13: ffff8880a601f680 R14: 00007ffffffff000 R15: 000000002000010a [ 1141.057226] ? _copy_to_user+0xb1/0xd0 [ 1141.061134] syslog_print_all+0x48e/0x790 [ 1141.065342] do_syslog+0x16b/0xb60 [ 1141.068878] ? __sb_end_write+0xc1/0x100 [ 1141.072933] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1141.078084] ? fput+0xd4/0x150 [ 1141.081387] ? SyS_write+0x15e/0x230 [ 1141.085120] SyS_syslog+0x26/0x30 [ 1141.088567] ? do_syslog+0xb60/0xb60 [ 1141.092276] do_syscall_64+0x1e8/0x640 [ 1141.096157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1141.101010] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.106281] RIP: 0033:0x45a919 [ 1141.109472] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1141.117253] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1141.124701] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1141.132070] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1141.139335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1141.146621] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:35 executing program 5 (fault-call:0 fault-nth:6): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1141.160264] net_ratelimit: 20 callbacks suppressed [ 1141.160270] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.170486] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.175659] protocol 88fb is buggy, dev hsr_slave_0 [ 1141.180774] protocol 88fb is buggy, dev hsr_slave_1 [ 1141.213805] FAULT_INJECTION: forcing a failure. [ 1141.213805] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.225499] CPU: 0 PID: 3870 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1141.233440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.242822] Call Trace: [ 1141.245423] dump_stack+0x142/0x197 [ 1141.249063] should_fail.cold+0x10f/0x159 [ 1141.253232] should_failslab+0xdb/0x130 [ 1141.257226] kmem_cache_alloc+0x2d7/0x780 [ 1141.261571] ptlock_alloc+0x20/0x70 [ 1141.265209] pte_alloc_one+0x60/0x100 [ 1141.269020] __pte_alloc+0x2a/0x2d0 [ 1141.272837] __handle_mm_fault+0x29fc/0x33d0 [ 1141.277313] ? copy_page_range+0x1de0/0x1de0 [ 1141.281998] ? find_held_lock+0x35/0x130 [ 1141.286077] ? handle_mm_fault+0x1b6/0x7c0 [ 1141.290419] handle_mm_fault+0x293/0x7c0 [ 1141.290432] __do_page_fault+0x4c1/0xb80 [ 1141.290446] ? vmalloc_fault+0xe30/0xe30 [ 1141.298555] do_page_fault+0x71/0x511 [ 1141.298571] page_fault+0x25/0x50 [ 1141.309878] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1141.315768] RSP: 0018:ffff888206cefd28 EFLAGS: 00010206 [ 1141.321143] RAX: ffffed1011880412 RBX: 000000000000004a RCX: 000000000000004a [ 1141.328434] RDX: 000000000000004a RSI: ffff88808c402040 RDI: 00000000200000c0 [ 1141.335716] RBP: ffff888206cefd58 R08: 1ffff11011880408 R09: ffffed1011880412 [ 1141.342997] R10: ffffed1011880411 R11: ffff88808c402089 R12: 00000000200000c0 [ 1141.350267] R13: ffff88808c402040 R14: 00007ffffffff000 R15: 000000002000010a [ 1141.350299] ? _copy_to_user+0xb1/0xd0 [ 1141.350315] syslog_print_all+0x48e/0x790 [ 1141.350336] do_syslog+0x16b/0xb60 [ 1141.361506] ? __sb_end_write+0xc1/0x100 [ 1141.361522] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1141.361532] ? fput+0xd4/0x150 [ 1141.361543] ? SyS_write+0x15e/0x230 [ 1141.361560] SyS_syslog+0x26/0x30 [ 1141.361569] ? do_syslog+0xb60/0xb60 [ 1141.361584] do_syscall_64+0x1e8/0x640 [ 1141.396393] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1141.401258] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.406485] RIP: 0033:0x45a919 15:38:35 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:35 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:35 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:35 executing program 5 (fault-call:0 fault-nth:7): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1141.409684] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1141.417409] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1141.424857] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1141.432124] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1141.439380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1141.446652] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:35 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:35 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:35 executing program 1: clone(0x72c0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=ANY=[], 0x0) [ 1141.588402] FAULT_INJECTION: forcing a failure. [ 1141.588402] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1141.608579] CPU: 0 PID: 3892 Comm: syz-executor.5 Not tainted 4.14.159-syzkaller #0 [ 1141.617390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1141.626755] Call Trace: [ 1141.629363] dump_stack+0x142/0x197 [ 1141.633097] should_fail.cold+0x10f/0x159 [ 1141.637260] ? __might_sleep+0x93/0xb0 [ 1141.641172] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1141.645868] ? __pte_alloc+0x1a2/0x2d0 [ 1141.649780] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1141.654855] alloc_pages_vma+0xc9/0x4c0 [ 1141.658856] __handle_mm_fault+0x186c/0x33d0 [ 1141.663287] ? copy_page_range+0x1de0/0x1de0 [ 1141.667713] ? find_held_lock+0x35/0x130 [ 1141.671790] ? handle_mm_fault+0x1b6/0x7c0 [ 1141.676057] handle_mm_fault+0x293/0x7c0 [ 1141.680138] __do_page_fault+0x4c1/0xb80 [ 1141.684212] ? vmalloc_fault+0xe30/0xe30 [ 1141.688322] do_page_fault+0x71/0x511 [ 1141.692140] page_fault+0x25/0x50 [ 1141.695606] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1141.701497] RSP: 0018:ffff888209247d28 EFLAGS: 00010206 [ 1141.706986] RAX: ffffed1012433772 RBX: 000000000000004a RCX: 000000000000004a [ 1141.715052] RDX: 000000000000004a RSI: ffff88809219bb40 RDI: 00000000200000c0 [ 1141.722358] RBP: ffff888209247d58 R08: 1ffff11012433768 R09: ffffed1012433772 [ 1141.727330] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1141.729635] R10: ffffed1012433771 R11: ffff88809219bb89 R12: 00000000200000c0 [ 1141.729642] R13: ffff88809219bb40 R14: 00007ffffffff000 R15: 000000002000010a [ 1141.729676] ? _copy_to_user+0xb1/0xd0 [ 1141.729691] syslog_print_all+0x48e/0x790 [ 1141.729707] do_syslog+0x16b/0xb60 [ 1141.764803] ? __sb_end_write+0xc1/0x100 [ 1141.768911] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1141.773948] ? fput+0xd4/0x150 [ 1141.777154] ? SyS_write+0x15e/0x230 [ 1141.780888] SyS_syslog+0x26/0x30 [ 1141.784345] ? do_syslog+0xb60/0xb60 15:38:35 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="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", 0x4e0, r2) keyctl$assume_authority(0x10, r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) dup(r3) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x101a00, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000800)={0x7, 0x7b, 0x2}, 0x7) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1, 0x0) mknod$loop(&(0x7f0000000840)='./file0\x00', 0x10, 0x1) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) r5 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:35 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000340)) r3 = socket$pppoe(0x18, 0x1, 0x0) close(r3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000d081caa500000000000000000000000000000000000000000000feffffff00000000000000"], 0x2e0) 15:38:35 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1141.788068] do_syscall_64+0x1e8/0x640 [ 1141.791971] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1141.796831] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1141.802037] RIP: 0033:0x45a919 [ 1141.805233] RSP: 002b:00007fb5f3862c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1141.811482] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1141.812946] RAX: ffffffffffffffda RBX: 00007fb5f3862c90 RCX: 000000000045a919 [ 1141.812953] RDX: 00000000000000e0 RSI: 00000000200000c0 RDI: 0000000000000003 15:38:35 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000340)) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000380)={0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000) 15:38:35 executing program 5 (fault-call:0 fault-nth:8): syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1141.812959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1141.812966] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb5f38636d4 [ 1141.812972] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1141.866193] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.150137] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.155262] protocol 88fb is buggy, dev hsr_slave_1 15:38:36 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:36 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x0, 0x0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000400)) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000380)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000003c0)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1142.289362] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1142.306012] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:36 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:36 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x120) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x7) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x7, 0x3000}, 0x4) 15:38:36 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x4, {0xa, 0xff, 0x10001, @remote, 0x30000000}, r2}}, 0x38) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000003c0)={0xfffffff, 0x7fffffff, 0x7, [], &(0x7f0000000380)={0x299d003ab738a1cf, 0x101, [], @string=&(0x7f0000000340)=0x7}}) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:36 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1142.390153] protocol 88fb is buggy, dev hsr_slave_0 [ 1142.395278] protocol 88fb is buggy, dev hsr_slave_1 15:38:36 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/connector\x00') 15:38:36 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000340)=""/19, 0x13, 0x100, &(0x7f0000000380)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x1, @rand_addr=0x400}}, 0x24) [ 1142.460910] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1142.497942] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1142.571380] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.592425] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1142.610110] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:36 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@local, @dev={0xfe, 0x80, [], 0xe}, @mcast2, 0x81, 0x9, 0x80, 0x100, 0xffffffff00000001, 0x4000000, r2}) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000000)='timers\x00') preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000440)={0x2}) preadv(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000400)=@gcm_256={{0x303}, "b576da1710eda590", "e07b810fd1868c1ac54369bb577d1decbc47cfce9de3b15b06c456c267c442a7", "01f433a3", "28345cdb47af018a"}, 0x38) 15:38:36 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) r2 = dup2(r0, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00', 0x5) syslog(0x3, &(0x7f00000001c0)=""/224, 0xe0) 15:38:36 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2e0) [ 1142.693963] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:37 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:37 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/214, 0xfffffffffffffcde) 15:38:37 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:37 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xf1) ioctl$TIOCCBRK(r0, 0x5428) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/736], 0x2e0) 15:38:37 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xc800, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000001c0)=""/152) 15:38:37 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:37 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:37 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r3 = fcntl$dupfd(r2, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:37 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r1, 0x201, 0xfffffffd}, 0x20}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2c2eb6a2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff2ca}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 15:38:37 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) socket$inet6_udplite(0xa, 0x2, 0x88) mknod(&(0x7f0000000400)='./file0\x00', 0x8000, 0xff80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000fdcc70ff000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:37 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00\x00\x00\xdcf\xdbr\xd2\xc7\xd7\xc5X-\xbc\xb1\x00', 0x9, 0x3, 0x2a0, 0xe8, 0x0, 0xe8, 0x0, 0xe8, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00', {}, {0x18be92b1fbf75c7b}, 0x0, 0x1}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x4, 0x9, 'netbios-ns\x00'}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rose0\x00', 'bond0\x00', {}, {}, 0x0, 0x7, 0x50}, 0x0, 0xe0, 0x120, 0x0, {}, [@inet=@rpfilter={0x0, 'rpfilter\x00', 0x0, {0x1}}, @common=@ah={0xffffffffffffff67, 'ah\x00', 0x0, {0x7ffffffe, 0x2a48}}]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x4, 0x7, 0x8, 0xcd2, 'snmp\x00', 'syz1\x00', 0xfffffffffffffffd}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfec8) 15:38:37 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) fsetxattr$smack_xattr_label(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)={'ppp1'}, 0x5, 0x3) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x7fffffff, 0x7, 0x7f, 0x2, 0x8, 0x3, 0x5, 0x7f, 0x40, 0x4, 0x7, 0x5, 0x3}, {0xffffff80, 0x4, 0x0, 0x0, 0x0, 0x9, 0x80, 0x5, 0x7, 0xa0, 0x20, 0x20, 0xffffffffffffff81}, {0xf86f, 0xd4, 0x1, 0x0, 0x4, 0x4, 0xf, 0x4, 0xe5, 0x2, 0x5, 0x3, 0x7}], 0x5}) [ 1143.512993] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:37 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:37 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0xe8, 0xe8, 0x0, 0x0, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00', {}, {0xe2db054e662fe4f6}}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@IDLETIMER={0x0, 'IDLETIMER\x00', 0x0, {0x3ff, 'syz0\x00', 0x1}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x584]}}}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffffbc) 15:38:38 executing program 5: syslog(0x4, &(0x7f0000000000)=""/259, 0x103) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x76, &(0x7f0000000140)={r3}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) 15:38:38 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000000)=""/22, 0x16, 0xab7ea60c805a304b, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:38 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:38 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:38 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:38 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x7, 0x3, 'client0\x00', 0xffffffff80000004, "0f62d3b2ed91e282", "4f2f1dca835b40ca58980bc0f50a1cf9555c7504c75a1961092418cd384f137a", 0x0, 0x10001}) r2 = fcntl$dupfd(r0, 0xc0a, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2e0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000340)={0x23, 0xe, 0x8, 0xd, 0x4, 0x1, 0x6, 0x75, 0x1}) [ 1144.259983] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1144.278006] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:38 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5e, @mcast2, 0x33b}, 0x1c) 15:38:38 executing program 1: clone(0x2000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1144.421413] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:38 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1144.478567] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:38 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000400)={0x3, r1}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f00000004c0)='/selinux/avc/hash_stats\x00', 0x18) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e64300000000000000000000000000000000000000000000000000000000000000000006f0a35000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00"/736], 0x2e0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000340)="a224ef50bc215dd3b62ce899708eb8987919da557c247fbdd27f36b7ce25af0d0736a87107855cdade38cb0e30d6de382af01460560ca819b79a90012230634460db34845b5a2e3e2a5541f437db33dcf0f84d500f5589393fcb1da1b1d868c3bb304e6e2eff1b6de627b32b99a5829a9779dfae65a4a5815820b683df7c20acbdf9483bd072a9a9b620cb4786062937c53cce9c90ff", 0x96, 0x1, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440)=0x1, 0x4) [ 1144.532719] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:38 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:38 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) setpriority(0x1, r0, 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e001000000000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f52000000000000000000000000000000000000000000f400000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000001eae4fcf3e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000001961705348ab63860000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/742], 0x2e0) 15:38:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000340)={0x5, 0x66e, 0x4}) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:39 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:39 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:39 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}]}, 0x6) 15:38:39 executing program 2: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x7, 0x3, 'client0\x00', 0xffffffff80000004, "0f62d3b2ed91e282", "4f2f1dca835b40ca58980bc0f50a1cf9555c7504c75a1961092418cd384f137a", 0x0, 0x10001}) r2 = fcntl$dupfd(r0, 0xc0a, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c400000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000a5f0c9282cac84e400000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000006e00000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040104552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000000000000000000000b921031e5881d3facf6671d68c1f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000340)={0x23, 0xe, 0x8, 0xd, 0x4, 0x1, 0x6, 0x75, 0x1}) 15:38:39 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001940)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001980)={0x0, 0xf000}, &(0x7f00000019c0)=0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001800)='rdma.current\x00', 0x0, 0x0) bind$inet(r4, &(0x7f0000001840)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) add_key(&(0x7f0000001580)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="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", 0xffffffffffffff93, r2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r2, 0xcf, 0x1000}, &(0x7f0000000340)={'enc=', 'oaep', ' hash=', {'sha224-avx\x00'}}, &(0x7f00000003c0)="0ffe9a6b4f0335f2732c8acd1c418b8b2d5b6928ee419e9dc7d10e1e6f25686b1a8655fd0126af7da932a7c69b61f9e0a7cf0fa833942ebbcb05f18ef5c37aced41dc7821e888c20afce71c63221f005f8e9cfd29a50c12f8a056570dc504b3db2e1326e8b99a090483bd33caedad3283e4d2488f246a0fbf51c6c1909bbe9d5a19c378d430c5ec0115f00b8743ac63def3e3d9c9123c2d79a63e4cad19bcda3280e05fd3c801b8e8b93b3beb8ba35a583b7804b1c8f8f867c789f23a7b2f91cfa4c01f1f2c89ef435cd5912a918c4", &(0x7f00000004c0)=""/4096) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/vsock\x00', 0x6ecfe60e3a82bb3d, 0x0) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, &(0x7f0000001900)={0x1, 0x100}) connect$tipc(r6, &(0x7f0000001880)=@nameseq={0x1e, 0x1, 0xe0e470ef4b18354b, {0x0, 0x3, 0x3}}, 0x10) preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f00000015c0)={0x7f, "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"}) sendmsg$key(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x2, 0x15, 0x81, 0x8, 0x4, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd25}]}, 0x20}}, 0x10044010) [ 1145.258496] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:39 executing program 2: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000080)={0x7, 0x3, 'client0\x00', 0xffffffff80000004, "0f62d3b2ed91e282", "4f2f1dca835b40ca58980bc0f50a1cf9555c7504c75a1961092418cd384f137a", 0x0, 0x10001}) r2 = fcntl$dupfd(r0, 0xc0a, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2e0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000340)={0x23, 0xe, 0x8, 0xd, 0x4, 0x1, 0x6, 0x75, 0x1}) 15:38:39 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "6f348a04941ab73c", "b3dfc62cfd346f49ffb2413aeefbc388", "2f61b275", "43f6cc1be9f3abd7"}, 0x28) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f00000001c0)={'erspan0\x00', 0x7, 0xe135}) [ 1145.358456] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1145.381064] Unknown ioctl 1074819273 [ 1145.389012] Unknown ioctl 1074819273 [ 1145.394874] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:39 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:39 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/26}, {&(0x7f00000001c0)=""/174}], 0x1000000000000294, 0x0) close(r0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x20, 0x4) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1145.484219] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:39 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x408000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x260, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@set={0x40, 'set\x00\x00\x00\xff\xff\xff\xff\xff\xff\xff\xfb\x00', 0x0, {{0x0, [], 0x2}}}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 15:38:39 executing program 5: syslog(0xa, &(0x7f00000000c0)=""/224, 0xe0) 15:38:39 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:40 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:40 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}]}, 0x6) 15:38:40 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000680)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000006c0)={0xffffffc1, "26ba0cdaee7cedbb27899b17b8581181b19286a645579ff2e49c9b0881c5488c", 0x6, 0x1}) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@security={'security\x00', 0xe, 0x4, 0x2d0, 0x188, 0x188, 0x98, 0x98, 0x188, 0x238, 0x238, 0x238, 0x238, 0x238, 0x4, &(0x7f0000000000), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x19}, @loopback, 0xff000000, 0xff, 'bcsh0\x00', 'bond0\x00', {}, {0xff}, 0x2f, 0x1, 0x41}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xb, 0x7, 0x200}}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1fe0000ff, 0xffffffff, 'gre0\x00', 'teql0\x00', {0xff}, {0x101}, 0x0, 0x1, 0x8}, 0x0, 0x273, 0xf0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xfff0, 0x6, [0x30, 0x12, 0x25, 0x11, 0x2a, 0x6, 0x27, 0x4, 0x11, 0x2b, 0x20, 0x8, 0x35, 0xa, 0x2c, 0x7], 0x0, 0x9, 0x5}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b09a9cca11d15bc9324db2b6ad07b86d378050c610ff147eb692c2304334"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffede) 15:38:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:40 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) msgget(0x2, 0x58a) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7379aacd656d2e5c00"], &(0x7f0000000080)='\x00', 0x1, 0x5) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) pwrite64(r0, &(0x7f00000001c0)="22c9301282ce1c276e899ab30d43cf30e5b2d459f69ef85de492cf2f11687e9746777252f2a755a5b6c562272fdb5b", 0x2f, 0x100) 15:38:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:40 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}]}, 0x6) [ 1146.175303] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:40 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:40 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x5a1b20ceee332c94, 0x0) lseek(r0, 0x400, 0x4) 15:38:40 executing program 1: clone(0x581c4200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1146.254096] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:40 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) [ 1146.310146] net_ratelimit: 19 callbacks suppressed [ 1146.310151] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.315174] protocol 88fb is buggy, dev hsr_slave_1 [ 1146.433417] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1146.550160] protocol 88fb is buggy, dev hsr_slave_0 [ 1146.555338] protocol 88fb is buggy, dev hsr_slave_1 15:38:40 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) [ 1146.910778] ip_tables: iptables: counters copy to user failed while replacing table 15:38:41 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:41 executing program 3: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x19404, 0x0) 15:38:41 executing program 5: openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x118602, 0x0) write$selinux_context(r0, &(0x7f0000000240)='system_u:object_r:sound_device_t:s0\x00', 0x24) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x20041, 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) mknodat(r1, &(0x7f0000000280)='./file0\x00', 0x8000, 0xc422) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000080)={0x8c82, 0x3, 0x9, 0x3393, 0xd24c}) 15:38:41 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'rdma'}]}, 0x6) 15:38:41 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000340)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:41 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1147.088666] QAT: Invalid ioctl 15:38:41 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000002c0)={'batadv0\x00', {0x2, 0x4e24, @multicast2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000001, 0x0, 0x0, 0x2}}}}, 0x30}}, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0xc00) syncfs(r3) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4005200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000009}, 0x20000000) [ 1147.110128] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.115249] protocol 88fb is buggy, dev hsr_slave_1 15:38:41 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) 15:38:41 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000001c0)=""/63) clone(0xc065026e2c717522, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xae, 0x1, 0x20, "42dca829dfd1e4431199e6dc5719c4f5", "e955a74815946b13ba3844f71ab38d8eb4595b2d322b87588f0673bcafc9dbab5c57eb392ff1d5abdcc948cda482934ec33be688afa5e80155e7c0ab16da83bd47970fa3d6c4ce2fe315ad7288f6e3adef967ff656bc4d5439e33e348e140ae2ec85951971f2db31697c8f7dfc2b8cca626816b549b708cc61831ab6da0769dc7d868d99d175007504a12e5903a05878bb673ebdebe92f55e8"}, 0x2c7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) [ 1147.182334] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:41 executing program 5: syslog(0x1d, &(0x7f00000001c0)=""/222, 0xde) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0xc0800) 15:38:41 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x1, 0xd3, 0x4, 0x2bd, 0x3}) [ 1147.304097] QAT: Invalid ioctl [ 1147.329901] audit: type=1400 audit(1576769921.279:198): avc: denied { setattr } for pid=4262 comm="syz-executor.1" name="cmdline" dev="proc" ino=144823 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 1147.350141] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.360975] protocol 88fb is buggy, dev hsr_slave_1 [ 1147.366110] protocol 88fb is buggy, dev hsr_slave_0 [ 1147.377129] QAT: Invalid ioctl 15:38:41 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:41 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:41 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'veth0_to_team\x00', {0x2, 0x4e21, @rand_addr=0x401}}) 15:38:41 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) 15:38:41 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x802, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000140)={0xd, &(0x7f0000000100)=""/13}) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x3}}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=ANY=[], 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = getpgid(r3) sched_rr_get_interval(r4, &(0x7f0000000000)) 15:38:41 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:42 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0x2d0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1000, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1) times(&(0x7f00000001c0)) 15:38:42 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') 15:38:42 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2e0) 15:38:42 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'ip6_vti0\x00', {'gre0\x00'}, 0xda}) dup(r0) 15:38:42 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e00000010000000000000000687372300000000000e2ffffff00000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00020010000000000000000000000000000000000000000400073657400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000000000000000000000000000000000e63f004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) [ 1148.159871] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:42 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x40) [ 1148.267758] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:42 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:42 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:42 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffffffffffeff) 15:38:42 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) 15:38:42 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x200041) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) times(&(0x7f0000000240)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r4, 0x4010ae94, &(0x7f0000000280)={0x10000, 0x7ff, 0x3d9}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @nfc={0x27, 0x1, 0x2, 0x3}, @nfc={0x27, 0x0, 0x1}, @llc={0x1a, 0x41b, 0x5, 0x98, 0x6, 0x1, @random="fee08767aa8d"}, 0x9, 0x0, 0x0, 0x0, 0x1c7, &(0x7f0000000080)='vlan0\x00', 0x7, 0x6, 0xfffe}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000040)={0x2, 0x2, [0x7ff, 0xffffffff, 0xffffc73f, 0x8, 0xca, 0x301c4490, 0x5, 0x7]}) 15:38:42 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:42 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000c49300000000000000feffffff00000000"], 0x2e0) 15:38:42 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') 15:38:42 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001200)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d80100000000000000000000c800000000000000c8000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414aa0000000000000000726f7365300000000000000000000000626f6e64300000000000000000000000000000000000000000000000000000000000000000000000000000000000e0002001000000000000000000000000000000000000000040007365740000000000000000000000000000000000000000000000000100000000000000000000001f02c79690801340401f3f97763a000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a6400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000005c69fc7e60544a4e804fcc8871129a09fc8648204df7ad20b3a517a8d2ccd86a0a1632c40102371aaeadc5f6205ca55eaa0146debec7aa987caeea437d129460e09e058bb1ee0aa0dacd527ee3ef2324885477fc7db16ee6a49b363236b3bbadc5dcb4e39942b8ef7567bf9fc5b6fa4e99e0f24d3b456d78aee5282045c89f16f56520315c33b3ef6972e8d4bcd27f992b1dda16016eb4d6d98ce8e0bccc83af361494cc69f7178ac58c64fb4044fc1813d8783b5eee948c90390e0a648b1ab0a93936d692598f8d7c09a2b729"], 0x17) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000a40)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r6 = accept4$nfc_llcp(r5, &(0x7f0000000a80), &(0x7f0000000b00)=0x60, 0x800) preadv(r6, &(0x7f0000001140)=[{&(0x7f0000000b80)=""/182, 0xb6}, {&(0x7f0000000c40)=""/231, 0xe7}, {&(0x7f0000000d40)=""/190, 0xbe}, {&(0x7f0000000e00)=""/36, 0x24}, {&(0x7f0000000e40)=""/133, 0x85}, {&(0x7f0000000f00)=""/120, 0x78}, {&(0x7f0000000f80)=""/134, 0x86}, {&(0x7f0000001040)=""/32, 0x20}, {&(0x7f0000001080)=""/171, 0xab}], 0x9, 0x3) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/28, 0x2}, {&(0x7f0000000900)=""/225, 0xe1}], 0x4, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000006c0)={0x4d, &(0x7f0000000640)="d559a1b6b7051be110f942b1580e5ae7da5e4b66cc5a79c5a737dbfb7d05e50289dd536960de84264d152ef5cc908f6925db97dc6d34ac4cc197e65ec04dbd1b3ef6cafdc4723d6480cd05e64c"}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r8, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000500)={0x0, 0x401, 0x7, 0x4d2cc54e}, &(0x7f0000000540)=0x10) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000580)={r9, 0x9, 0x30}, 0xc) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f00000004c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000340)}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x2}, 0x10) [ 1148.965812] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:43 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6, 0x202000) 15:38:43 executing program 5: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) set_tid_address(&(0x7f00000000c0)) syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000100)) 15:38:43 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1149.234594] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 15:38:43 executing program 2: syslog(0x0, &(0x7f00000000c0)=""/210, 0xd2) 15:38:43 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:43 executing program 1: clone(0xa92d7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:43 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/216, 0xd8) 15:38:43 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:43 executing program 2: syslog(0x0, &(0x7f00000000c0)=""/210, 0xd2) 15:38:43 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:43 executing program 2: syslog(0x0, &(0x7f00000000c0)=""/210, 0xd2) 15:38:43 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x918, 0x9c8e]) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000004c0)=""/182) [ 1149.804623] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:43 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000001, 0x0, 0x0, 0x2}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x945543bfd3fe834e}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20018000) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) 15:38:43 executing program 2: syslog(0x3, 0x0, 0x0) 15:38:43 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={&(0x7f0000000340)=@caif=@dgm={0x25, 0x142, 0x6}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="211223c5b008f3a47c4712e54bb8c5b7ddc86915029884cb32159b39dc06381384cfe6224dd0a9d7c6fd573463ac4a0b49eaade97fff9afbe1b772de268be5660f1789d33660ba31e7f5ff55a2c2343c8ad6cae4590a570f7bdfa8106dd26f4c94ba9d55421250bd5e7f75bd0418007a48dca6c052722cfb0909663cafcc496d6d584a7e7eb60b01eaa0234a00032afb9d2b13b23dfdb42d96685edf2e09920c1f0340a53771a032057466c6876bf95bea846fe38445c5b181cf41a41744d2e08c15b4da2536973a373dccebbe594749eb9fa79549a9ec56359d36b317af4ddd92", 0xe1}, {&(0x7f00000004c0)="b68be91fa4d5abfec9c163d414a4c24cc68e5dcca86490ba89b558fb77299eea201973811ce1da1d9e9f7b03e0d7a0aeb3ef7f16486f213d00194086c79c5e8142fb296dd7882ae98a6a5547ee419ae6ae02670e6dc7ab434d39ff5d94264c21f49a94", 0x63}], 0x2, &(0x7f0000000580)=[{0x10, 0x11, 0x6}, {0xc8, 0x105, 0x2, "7f0413c58bde419a58909f487e5de2b31e746059ea222e3a36d5010d3c62354f675e1a92d99e8091e70ef5ccd6a5beec3fc41a6042e3e3cd5f8a0793a39c33fed8e3315bacbad9e48801b636f2c162b9222940766b889b0d83746b3c360e985596992d3a0dc16ceca02af83bdd057ddba26fd6be32ddce2283ae7f42cd4f3b4abea5d1d353ba94e9eb79ee25c2e53e6435bab16d22952a25416eefc1aee97040150a873eacc8b0df82fac63b468c05428c45f6b947"}, {0x20, 0xecc1c9f83126ed08, 0x7fff, "65cb3fdb4d62722d43"}, {0xc0, 0x117, 0x7, "eff00235e380ec4373304bd3986e7a738cee31f5c1c1b3594b512e082c12fe29ef3e69d076b839eddde3357ea1910960a6f8059f9d8b6908d4926d5dcc7cdb8d77c6658aa53a815b641bc7a243477b37f2d712fdd25942a00e7f5ab048c77c589d1b8cc8c667aafd30a4524fdca43479449dff477f06e9455e683b63bafc3f06c430f403e05f476093d205b7e4deccae9aeccbe2f4e1f93b2799d0de75d4fa603399e7aa345e788cd1c7"}, {0xa0, 0x2f9a193cf02b9c44, 0xfffffffa, "ce5366455cd0e58591b8481782e24c05f0efd07055bef1125a06cb5747e356873555699cff8ef722310e769104c908df5dd0d822195bab936d4d47726535392b7abe4faa3d16b0fb14e8c7a3980f64f7cc3125f3ea7d7db5de35d80fa70a8f7fb605d70460785bbb4001eabad95a527c3d0fa34da632cafd1e4262bf85b151d5d78c59e71555413fbd4f260e"}, {0x98, 0xebc70a6a5fce62f5, 0x10000, "a0343d12d0240cc5b962b5e4de2e2a3a5ae67fc57d9c90d90eddeed794e970f3310f758a347d97518d33c0938c4139db67f378cb3c22b5fbde6c4e2845da81a01dc0944c5fbc2914b2466611ce00fae8d1c1ccf030432f8a8ef7ea704f727bf11aa7dc760b033778118b62700a04207ff3632c01f23fc0cc2b4a77b87d9f5f75404acdb9d50d67aa"}], 0x2f0}, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x2cae) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1149.922369] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:43 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x10, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe, 0x1}, 0x0) ptrace$setregs(0xf, r0, 0xff, &(0x7f0000000100)="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") syslog(0x3, &(0x7f0000000000)=""/235, 0xeb) [ 1150.031354] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:44 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:44 executing program 2: syslog(0x3, 0x0, 0x0) 15:38:44 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='%^lo\x00', 0xfffffffffffffffc) add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="8d886290d0f6f1a7028867c57df47c106a6b8ffed44191bdd14a353066e0a4579f12df047746ff68b878f0f61be18c9f24236b2084e48115a1df827f9be8435f7ae2ad566f5b2cc56db6dd38dfd0f07b20811a0ab1983c92c441a17f7997528722d6ed0e8bd618beff13973d118dfb245e51bb186b50a74078d7e7e108160901d5bed9af5c01862ec4225b7b870bd5529dece831e00791043545f648683b39cb04d3514806a766ceceba2044db548aad8d06f3d2facf942632d052aee53e3fb2eca810977de36d44210834dbcb616707a48349be7e3ae2", 0xd7, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:44 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:44 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:44 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:44 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x68, 0x0, &(0x7f00000003c0)=[@dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x2, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x29}}, &(0x7f0000000000)={0x0, 0x20, 0x38}}}, @request_death], 0xe7, 0x0, &(0x7f0000000440)="e45c1839fe6cd26fce5c678e81d2d4142caf5b59ecc432721b016301e066f43f6eecfafb495e463ca196f8d73204992bc2b4d4b0efa4de5304703c1cda23095b623f78012997348ddaab835959ac41908bb03f9ed4469fa0f28fc1710cd6a963355153598282243e155942046fc4ece236bfd4cc13d8298b80d81ba317bab7650ca12da6aeb3c0c74c30e3f09c58388572ea5d961fb1fd788e0f01805d390e0d5124447b2472b314e5c092c89d28e667270cc2938da651ff7e892e2d31b40ea0280305356da79453371ae26f4afab0136073ee0a59e792347ef2b4e1b81fd6debafc9028537b07"}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:44 executing program 2: syslog(0x3, 0x0, 0x0) [ 1150.739561] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:44 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000000), 0xc0000) getegid() 15:38:44 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r2, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10004}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000c96) 15:38:44 executing program 2: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000001, 0x0, 0x0, 0x2}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x945543bfd3fe834e}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20018000) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1) [ 1150.833600] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1150.858161] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:44 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0xffffffff, 0x8}}) [ 1150.967806] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1150.978499] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1151.520129] net_ratelimit: 21 callbacks suppressed [ 1151.520134] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.530239] protocol 88fb is buggy, dev hsr_slave_1 [ 1151.535369] protocol 88fb is buggy, dev hsr_slave_0 [ 1151.540486] protocol 88fb is buggy, dev hsr_slave_1 15:38:45 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:45 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x16, 0x7}) 15:38:45 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'ip6_vti0\x00', {'gre0\x00'}, 0xda}) dup(r0) 15:38:45 executing program 5: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x44b7b38c8dc151aa) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@null=' \x00', 0x2, 'veth1\x00'}) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:45 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:45 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:45 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:45 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0x8e, [], 0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/142}, &(0x7f0000000300)=0x78) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f0000000380)={0x419a, 0x0, 0x4, 0x204}) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000340)=0x5) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1151.634585] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1151.652122] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not '/dev/kvm'. 15:38:45 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x76, &(0x7f0000000140)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={r4, 0x81}, 0x8) r5 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1151.701916] ip_tables: iptables: counters copy to user failed while replacing table 15:38:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0xf1e6) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0xc8, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3b}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x10000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x20, r3, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f00000001c0)=0x6) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r3, 0x204, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff239}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 15:38:45 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f00000001c0)={0x800080000000000, 0xafac}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x3f, 0x7ed4928addbe88af, 'client1\x00', 0x4, "ad32756f310caa4b", "5d2687ea4ec0e90203f7b3d88bc02d54018cc0a82de01c34c82aab2e536e9b4e", 0xe4a, 0x8}) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1151.855805] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:45 executing program 5: syslog(0x4, &(0x7f00000001c0)=""/211, 0xfffffffffffffe7e) 15:38:46 executing program 5: syslog(0xa, &(0x7f0000000100)=""/237, 0xed) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6370757365746c6f250048284843d0837dd3b3a94fdf79287226bb"], 0xa, 0x0) 15:38:46 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:46 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:46 executing program 4 (fault-call:10 fault-nth:0): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:46 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/223, 0x244) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001e40)='/selinux/status\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000001e80)="46e87b9ab669ffabb0b2ba406533b96974d682b23cef903afd03e3830b29f1375e8f7f06db614bfb70cfca2e275dadcb826e147070558d5cfc08fe79eeed9a6e2f9157f217043319c1130628874aa6b5390c67aa02b5156a6dc40b6afde5e92cb1028fe5da5146b0cc05f44d2de1c92dea0a9ce37eb11004da04a78e4573f328f9a22627ed2df9d5dcf5f3c455d8131413409ea0799e15236a137c0a1aa756c13d02513d6e129c352d37200024cdedffac507a2670d2bef23f8d09922de5c2d3ca4848ce08ef0a4912395f101f8f21aba5ffd79b9bbe0f541cd4f17dd1c8a43ab0370dc71d0ae0c86a163b5ac69b9d8e0bd0cf379771c7c2aa5c966b9e81d2cfba939ad2eccab523883acea03931bd056f3b73829e17794f1eb53553dfb1868e14c95bbe11a5456310a043ebebf1f9350b55d21eb030d20ded3234722afd10c2646aef32922bacb2daf40ef75420197a5634d24339f1b92c08ad4b34c4515084e4a5e3b606135cd9f9bf79159b21a37e6cb13709a237f26866bcab1e3fc50b4c81851523de8a6887f95d386a57578713032d2157f9a793da366dce27b68f68f59622b9f97394078a5f965268f4ae1f45649d79ebd8aa1457ff6c2008f4d759c7a2f8ea49e2b8a0b899c23bce43629f9a9438a1ff7ff03b4221abde16eb602cb1164938b735148fe287273695c74add5e491c22a2919f8dc909f21296210aab713c610d5faa16a2153797000d2c5e0a1f875f9f8c6447464ec271f24cf3a686858731068e9fdb5db4c7fc3c3cada6438aa76085f9b084155b8a7f0193bbfa941383bb8148caf01236f2767530b2acf84a67b20fd41c480f813674785b6ec86a6063d1ce88ad399c69dfc3edb1677dbbc45b675720a5964d59dddd42853f8c59020debb8126aed32633730ead27bec908eba96f686796ce6648ff7d62657f2c5b6a45a1f385b2cc155ee3d9556715d45a202fdccbbae89fe744e6a00504ddddbd047f383533c1e5ae15cf3ba4ee9be0544d13edb69faf3bd7bbc40518142378a983dba608f2c79c61837156f33efff7540f2b4e9b2564a37f9f60332503c1e0b1a609a5990b52dd5ba0129f337630e0a58c2b7887d316909e1a2402a2ef2ee31d467d02ea87c6e915888218211dc15512c845ecca24caf2f7988b97a0e0552e1f3c2b527a303914c8072c6d9c72f58889fe352f218ba91b2bc9388e214b2857cb3de0185fc9ed16c98bc0515b18d2bcdda9cd6546ca02789bb1f1516cc63ed0ccf8eb62569c5eaf95efa20c92d7638c26458e00968423dfa1f966ba215d08caef5f8a9c888b1251fc0589eee2b47716d1bea779e592a1559ca023a7159a7c1e22947e5b4d2ce0b63f833c8809b71f15b47827ffd258a2f87c19e0811f913f50a86c9e762baf3627ab6d8f5aaa9d8c94a8dc55e115937c053fc85063c26c358f40c62abad5d465ed4978f486b26ff5c636fb8d986323aca84d4272232e70fbdd6ac51ac006a36d221a2a4de0f6e909188c50d09cfad98b7b1b30366386d7208c66876bd1601b6db91b6a1bf4e4159e3b02a10e457b842915a5672855cfad1dbcac501f1b29c2f5ca6ea5494960e72bca404127d8ee944e4202e0aae51085714b1550ba364f347fddb50b85c52c473a677b32f14afd5edda4684ddfbb484280a4c4520d929d3595574ed960b9c55c2c8d616a8077de4d1c1a75535d1f95df3b2d2d0edb9ff4c93c67f398df0ebd9d762863d909f0659691c6540d5754dbf28caf369323a916812bc92bef189db8de5a484c41dc06edc27d9c70aaeaf1c029b9d7feee8e5976c86f915423a1b5dad8408fbf60a2f675ce744d223019099b903da2cab633b2dc35195abe1c7e2701ca51401a8eb2c15fb5df34ddde2f55f51a51b2ac6806e99fb275ecfe9c9739a286ce848b91c606f6d4beed487b9d3108b6064fd10c56a750de6184c5c8065bcc009db348c7c896ee405383e492b7fc289fca4910cd440260a57d53da8508cc02d1da94035b4d745b1a37777640a326b5716549a3a6857b7b2663a5ab94ab7c2e4ddb0aa309812f2e3650c12077579204eda3e7bb4172d041cb53d5a635a4a828789c18c6ea74125a0731c829e4ea4bd4ec6e33215f4b508cb44627a60609ea3c3f8ea2f4b4a3ca2d4a50ddc282a949eab1a94997c6ee5492001469a20a89cdb637409b96a66873fc182dfc4187cac75046f673142dcbe0236684a3c05eb822b0aab5f22ae2a6160b7f3d8564ae9d9db8312b09bcb904ee7085ed8aa26d38d9e381aefa8f02491c7d0bb7b5b55f0069a5e8060f4ab64cabdb5cb208664d025fa0fe7c3d4b5ea4c9cb0d76bec737eb24dcc7de08885397df4a5b626dbe2283aed531a856a9f15a3eebec10989410f89f93336e411b6f2cad9fc8c352d18235873c43ac77faa1ec00ffa44c190cd3ea7b294bfa775ac214baf213f0cf6669b0c87920b7e428e32a6164801d56c6411ab53da9b3a1697120b356d9d4e6d3afba06830f53e966129a38bf6a68be7585b1423cbce44305025730ffc2919fa7334c7e96073f1aa4184ecc91ae2a89bd0f1a1facf1646d9a62366d3d3880119520868854c67f6a5c2e2e2186b53cd8a127b384254d59ec954e9bcc97374869648d3c567c1279674b88bfe2a0ee225e259d6ef903ad699de91d5bcfe4dcad0bd96714db31f667b57fedacc27a5fa9e4488f469dffeea146f38f1170fed45824cb455eecef3e07e8874b24e7952990404bed8888b926e454bea0daf9f151d91f252b5a9b1661b7f9d2e16623825eb61bde7ec33e4d42838d7441493cdf612901d1133fb67bb70f433f236902fb55a7e5522e55e9584379d8b16cf59b06e1e3f7ebdf0d2d97083db70ca6f58bdd8e414b2776c66f87e858f78ffb8e056f230014432101ef9007c7974c963175674083b2170ec5516c39eefa5c26f88087f583c0bf51b74288390a2b581e8490646ef0aa068f6c5b64c309a0b9978ebae5dcece2debb11ffc3a3f05ea13908b916f8051afc1dc71708255c112e39ed41f2c557d468af5b25304438f044419157d802d8fe93a42e652238698be33bddd028fef37a4300a20748a5d0cc3999952cf03c69ccc368e3172e1a37c4a19c39957d72b442bd74c76c0a6811735707cd5805a9079e7e2584f0832c6102a02f8d418044671c68e0de643cb98fdeec191b144a461ff049bc380c7e59cf8796d702a35e6db35607e5dd3b1b00aa13da0babd187278a7808d46e9050f55959163954954490e122dd6d0e02a3345043a97bfc8db9ab3c1ce82d9c2b2b8a8f225961412399681ffa2bc7c74e72142e17dd86886d00a55c5a01da16e4ec4bea639c78c1db7a3955d449b095ff5ab8bc6fb343c03e154e8b6268900d4ebcb7f6f550f87a087ba897bc4e488c6d2e473000397cf67ef01d4f04d382cf081694a1d3627aaece8058146e1f1a2c833ba1a2b5ba116d549555c79491f694c754a282661ac5662c543895de4a0fbf6f29a771835d517eda83afd0d9d02c7dcb0963f60a80a2d7a224a2b4e0f592f0c6f6ead1e0f05ce1f7912a28af9baf7ece42de00735dfd9a19f8927adb45a8a9273a863256d2bbbe97dceeae0f43806e9651ff5568c4b5059d335046afa3537f74f208ef3c3a8c5ce6e40abcbfa190ab4b4536b1d494e2b8cbeed2bd1d2017e417e23addce45b2644c79314d721881a12f81ebfcdf84c3219f5ee49d38290ef7bdfd19f2e71a91f49f69bb847d4b00101dd7b3b03c6b41593f512562ce837a7f9d56744f439b826de1590f6aaebb0399e8971d319c27220d8e7483de0e668ac5573110b009e1f70b033d81022afd8b75815635425c4d38cc43218248a65fa3f6587b44f133af237e7d24694381ec1116c78485b8afbd3aa3619fdb7449893b41ae0f42644a4c120aafa50d9148852408230f5076c51cce2d1ae684946ba03db6c76423aa3a1cf31a8a46526f4e4428bfc731725ae3e30c513c1a81216b840afc78fe7362ac70820d0b464aeec4d53853f291630b9f5bb7cddd2b4b1715907004d804c5159dfda006f301fed2f6d968245261a1b264955865b2aa3c975557e5bccc202c0fd6eb30a4a8b6d96ca60c87af48b3466319107f2749304aee51ea4912c35237f759b857cf02ea9d424afc2f95ab27d59698a4dcb6074968f9967682421c0cc5251f22bf8f0e33c0dddfe88d7fa1932b845c72b3d2754c83554beb837ad04a02a505a01d66e191bce4b1465cf2a310623a523c192bfa25bc1591ca687e350eb495f21cb3b9937eeee057cc48335832b115d6b4fae09b07c97bb062a1b733c4a21620d67a22b270be29366235050b79f699b4ff731f7eb2ec20a94e0397e97eb2f5a83561d6e4dbeb5af197f1c5f5dcf47df35f482431adfb2be457d5ff4aed73540bec4dbf5f0743fab2c51f3e47b60548639b97b9ff958cda189f829f5ee8a3f8852043f032a1584bdad5c67c1ebb7594c48be0cde7f90d790ff98c0ca151a272ada57d561b43ed0a9fe2859457fa041c8c4c6123bde597ba7262d03787d5f593ec5b09293f3896db021827a1d3f809a4b9e2444eddf2d108f6eee04b6ccb96029efe77533c30c100a05bfba15283fa3f0046f95cc816f47b682bc5ea49175fa5c5e4a9fa84f9806ac0a5645105424050bd142a422e175cfd56e281af7478f2bb07cdcffe1e1c19f4693bd8230d7906fe6359a2cd5444b96478ea589d70406b2a38d87de043d8067e1cba54cb2c7f2752b2d2d8d376c05024e42cd99fd548413eca1559f7d93f4f33a1085ff90eab544870ca1958a5e39bbfaaf07be6927b503f5556b611f041f4cb1e415f59d0c13387eb8181800ab3c2c3cfd5c23f7a822e12055698fc0422e7c25e385d7eae146d31ce65635a71566af2ab0fe76d992d0fa21a2c436435bcb89e83ea8732a929985a2934b0cbc36bdffc32f7d4e3c20007d09fea86ed05b76f77158e8e28fea33eaf230e15b083872f12eaf97ecef39a7b43e76815fc3765594f6787b161022ebdf85aa29aa143fdf316d142f7705dda775f737ca32875eef52cd5d45223329ffd5f3dbb90454aa17165dfeca6a87d002e0cae80c0845f01296aaac5dcfbade28acd5652047805ffeda848853899c9e105297f669c7c5265b0b7f13c5031d2866e27f3b4f5f50fa2aaff9642bf93bda0c1852efafcdbd9641cc211eff587508905153ec87624d4ec72ae0911d938c883c6dbcd4d68766bf61ec45bc19bc81c6f0011614d7aca9a0f4edc2a2437a85c2168692e1c14c251c5512dc7ba3e3f139e65733da1e632f9b286c12e1679e61b5d222d8a7d34e36d2bb7aac1f973e39f3794dc6c80b87ee613306f60918b3f8a9115dc44905431047091bf05708dc6c8f7a70780588bc3e1df1fdbb237cf3946f7b29a4353dbc9d9ead8f53ef8e4cb78578f3131b7cb812b46f7ec1bb62fbefec8929c4db50edc860ba221b1db8df92c673f3e5397dd88ab437c819660a026130d8850a1f05c9971965abe4dacd64dec0a31c23d99a8ba93af53079a72dbc4aad54165e5b3b314111997043b6e75cd1cc4af24dec1b8511082c885bc7a7d75d7bba34dedacb8b9fcdb5a8f686ddd05b7ffe679bea610df36bc2af2e1255171105d9dca26cb355409e942efd48a2d3653b069d9334764cab5ed84fc1e4390d0aa73ddbad9e3b3e684fe7da5127d605ab74ee50dbf1bfd3fa72fef77709428ee65bd599a22f57ccc91cdd58ea7ce002943e7d2e431b7fad5977f733ccefcde26e3d8a9c133c3bcb1709a6da3b6396a7862ef51dbdef41", 0x1000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x280100, 0x0) close(0xffffffffffffffff) sendmsg$rds(r1, &(0x7f0000001e00)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000280)=""/248, 0xf8}], 0x3, &(0x7f0000001bc0)=[@cswp={0x58, 0x114, 0x7, {{0x7f, 0x7}, &(0x7f00000003c0)=0x40, &(0x7f0000000400)=0x9, 0x5, 0x8, 0x81, 0x10001, 0x70}}, @rdma_args={0x48, 0x114, 0x1, {{0x7fffffff, 0xffff524d}, {&(0x7f0000000440)=""/50, 0x32}, &(0x7f0000001800)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/217, 0xd9}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000001680)=""/45, 0x2d}, {&(0x7f00000016c0)=""/6, 0x6}, {&(0x7f0000001700)=""/107, 0x6b}, {&(0x7f0000001780)=""/91, 0x5b}], 0x7, 0x5b, 0xb2fb}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001880)=""/11, 0xb}, &(0x7f00000018c0), 0x70}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001900)=""/97, 0x61}, &(0x7f0000001980), 0x1}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffffd, 0x7fffffff}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0xe45}, &(0x7f00000019c0)=0x2, &(0x7f0000001a00)=0x7, 0x8, 0x0, 0x8, 0x5, 0x40, 0x7fee7d50}}, @rdma_dest={0x18, 0x114, 0x2, {0xffff, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001a40)=""/163, 0xa3}, &(0x7f0000001b00)}}, @fadd={0x58, 0x114, 0x6, {{0x1, 0x5}, &(0x7f0000001b40)=0x385, &(0x7f0000001b80)=0x5, 0x7bc9, 0x0, 0x8, 0xf7, 0x40, 0x2a}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xd01}], 0x228, 0x4024}, 0x20000040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002e80)={r0}) bind$rds(r2, &(0x7f0000002ec0)={0x2, 0x4e22, @loopback}, 0x10) [ 1152.549382] ip_tables: iptables: counters copy to user failed while replacing table [ 1152.550128] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.562391] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.569061] FAULT_INJECTION: forcing a failure. [ 1152.569061] name failslab, interval 1, probability 0, space 0, times 0 [ 1152.584319] CPU: 1 PID: 4551 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1152.592148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1152.601509] Call Trace: [ 1152.604113] dump_stack+0x142/0x197 [ 1152.607820] should_fail.cold+0x10f/0x159 [ 1152.611986] should_failslab+0xdb/0x130 [ 1152.615961] kmem_cache_alloc+0x47/0x780 [ 1152.620017] ? __lock_is_held+0xb6/0x140 [ 1152.624081] ? check_preemption_disabled+0x3c/0x250 [ 1152.629154] dst_alloc+0xf3/0x1a0 [ 1152.632659] rt_dst_alloc+0x73/0x440 [ 1152.636389] ip_route_output_key_hash_rcu+0x731/0x2750 [ 1152.641670] ? check_preemption_disabled+0x3c/0x250 [ 1152.646781] ip_route_output_key_hash+0x1c0/0x2e0 [ 1152.651624] ? ip_route_output_key_hash_rcu+0x2750/0x2750 [ 1152.657168] ? raw_sendmsg+0x573/0x2450 [ 1152.661159] ip_route_output_flow+0x27/0xa0 [ 1152.665484] raw_sendmsg+0x87b/0x2450 [ 1152.669296] ? dst_output+0x140/0x140 [ 1152.673127] ? avc_has_perm_noaudit+0x420/0x420 [ 1152.677866] ? process_measurement+0x58a/0xb80 [ 1152.682452] ? process_measurement+0x58a/0xb80 [ 1152.687075] ? sock_has_perm+0x1ed/0x280 [ 1152.691151] ? save_trace+0x290/0x290 [ 1152.694978] ? __lock_is_held+0xb6/0x140 [ 1152.700181] inet_sendmsg+0x122/0x500 [ 1152.704005] ? inet_recvmsg+0x500/0x500 [ 1152.708031] sock_sendmsg+0xce/0x110 [ 1152.711760] kernel_sendmsg+0x44/0x50 [ 1152.715568] sock_no_sendpage+0x107/0x130 [ 1152.719703] ? sock_kzfree_s+0x50/0x50 [ 1152.723613] inet_sendpage+0x3b8/0x580 [ 1152.727573] kernel_sendpage+0x92/0xf0 [ 1152.731457] ? inet_sendmsg+0x500/0x500 [ 1152.735452] sock_sendpage+0x8b/0xc0 [ 1152.739168] ? kernel_sendpage+0xf0/0xf0 [ 1152.743237] pipe_to_sendpage+0x242/0x340 [ 1152.747434] ? direct_splice_actor+0x190/0x190 [ 1152.752024] __splice_from_pipe+0x348/0x780 [ 1152.756346] ? direct_splice_actor+0x190/0x190 [ 1152.760931] ? direct_splice_actor+0x190/0x190 [ 1152.765515] splice_from_pipe+0xf0/0x150 [ 1152.769569] ? splice_shrink_spd+0xb0/0xb0 [ 1152.773809] ? security_file_permission+0x89/0x1f0 [ 1152.778740] generic_splice_sendpage+0x3c/0x50 [ 1152.783324] ? splice_from_pipe+0x150/0x150 [ 1152.787639] SyS_splice+0xd92/0x1430 [ 1152.790173] protocol 88fb is buggy, dev hsr_slave_0 [ 1152.791354] ? __sb_end_write+0xc1/0x100 [ 1152.796820] protocol 88fb is buggy, dev hsr_slave_1 [ 1152.800844] ? compat_SyS_vmsplice+0x250/0x250 [ 1152.800854] ? do_syscall_64+0x53/0x640 [ 1152.800864] ? compat_SyS_vmsplice+0x250/0x250 [ 1152.800874] do_syscall_64+0x1e8/0x640 [ 1152.800884] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1152.800901] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1152.832922] RIP: 0033:0x45a919 [ 1152.836104] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 15:38:46 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80500, 0x0) fcntl$getown(r0, 0x9) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) syslog(0x3, &(0x7f00000001c0)=""/222, 0x4d6) 15:38:46 executing program 2 (fault-call:0 fault-nth:0): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1152.843801] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1152.851067] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1152.858331] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1152.865604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1152.872879] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:46 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = getpid() setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)="c6fa433ae3481ba7ffd8413e483e8a264431fe3971983a1b878725fe2de22bbd79e1309cc7dfd73c9291043c9fbd8cf636bcc92d333838b81ee0903af29b79425c1c39a65d182d07b3639163a9a4522fa988e4191ff9eb2e1bce0f7195cec7def84768ad028d0b943f06a18566f623087be64a738a296bd77631586a4f1c8b5506db3341af9106978c5b889fafb86695ba75b987bea36c52b8b6c366c14d31763ee9aa294a630318d73600e1a85a6c18f67479bc162978b64e1058b6922bd399feae0ea7b822265bc9f82305dfd502c96c93c72cdb691385fca148588c40639eede6856d85ccbe18e25ebe1b90e9fa17124cae2e", 0xf4) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='numa_maps\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000000)) 15:38:46 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000004c0)={{0x0, 0x4, 0x7fffffff, 0x6000, 'syz0\x00', 0x9}, 0x0, [0x7fff, 0x2, 0x3, 0x4, 0xc8, 0x2, 0xfffffffffffffaa6, 0x95, 0xdb0e, 0x1, 0x3, 0x9, 0x6, 0x401, 0x5, 0x5, 0x1, 0x1, 0x400, 0x176, 0x8001, 0x0, 0x0, 0x1b, 0x80000001, 0x4, 0x400, 0x3, 0x1ff, 0x5, 0xffffffffffffff7f, 0xfffffffffffffc00, 0x0, 0x200000, 0x4, 0x7, 0x1ff, 0x78, 0x7, 0x0, 0x65d2d5c4, 0xfffffffffffffffa, 0x9, 0x6, 0x6, 0x8, 0x100, 0x4, 0x6, 0x7, 0xfff, 0x1, 0x8, 0x7, 0x1, 0x0, 0x9, 0x1ff, 0x3, 0x7, 0x4, 0x4, 0x7fffffff, 0x7, 0x8, 0x1, 0x8001, 0x40, 0x8, 0x8001, 0x4, 0xafb, 0x0, 0x3, 0x7, 0x6f, 0x9, 0x81, 0x81ab, 0xffffffff, 0x10000, 0xfffffffffffffff7, 0x101, 0x10001, 0xfffffffeffffffff, 0x1, 0x64, 0xff, 0x7fff, 0x0, 0x8, 0x1c73, 0x1, 0x7fffffff, 0x7, 0x8, 0x5, 0xa8, 0x0, 0x7, 0x4, 0xe7, 0x0, 0x6, 0x0, 0x35, 0x10000, 0x11, 0x80ca, 0x7ff, 0xfffffffffffffffd, 0x35, 0x4, 0x3, 0x2, 0x2, 0xd0, 0x81, 0x7, 0xa02, 0x7, 0x80, 0x1, 0x3, 0xfffffffffffffffb, 0x0, 0x91e0, 0x6]}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self\x00', 0x400000, 0x0) fdatasync(r3) [ 1152.998573] FAULT_INJECTION: forcing a failure. [ 1152.998573] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.018547] CPU: 0 PID: 4567 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1153.026478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.026485] Call Trace: [ 1153.026507] dump_stack+0x142/0x197 [ 1153.026528] should_fail.cold+0x10f/0x159 15:38:47 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) close(r2) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r4 = accept(r3, 0x0, &(0x7f0000000080)=0xfffffe7d) connect$pppoe(r4, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @link_local, '\x00\x00\x00\xee\xff\xff\xff\xffJ\x15\x10\xdeK]\x92\xa6'}}, 0x1e) r5 = fcntl$dupfd(r0, 0x605, r1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000100)={{0x3, 0x1}, {0x6, 0x9}, 0xfffffffb, 0x0, 0x8}) [ 1153.026548] should_failslab+0xdb/0x130 [ 1153.026560] kmem_cache_alloc_trace+0x2e9/0x790 [ 1153.054930] syslog_print_all+0x55/0x790 [ 1153.059021] ? selinux_syslog+0x1a4/0x2c0 [ 1153.063219] ? security_syslog+0x79/0xa0 [ 1153.067304] do_syslog+0x16b/0xb60 [ 1153.070859] ? __sb_end_write+0xc1/0x100 [ 1153.074936] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1153.079965] ? fput+0xd4/0x150 [ 1153.083350] ? SyS_write+0x15e/0x230 [ 1153.087086] SyS_syslog+0x26/0x30 [ 1153.090555] ? do_syslog+0xb60/0xb60 [ 1153.094287] do_syscall_64+0x1e8/0x640 15:38:47 executing program 1: clone(0x44018500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/6}, {&(0x7f0000000400)=""/69}, {&(0x7f0000000840)=""/130}, {&(0x7f0000000540)=""/12}, {&(0x7f0000000580)=""/121}, {&(0x7f0000000600)=""/17}, {&(0x7f0000000640)=""/106}, {&(0x7f00000006c0)=""/234}], 0x39c, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000340)) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000900000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) [ 1153.098193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.103060] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1153.108260] RIP: 0033:0x45a919 [ 1153.111455] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1153.119188] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1153.126480] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1153.133765] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1153.141048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 15:38:47 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) open$dir(&(0x7f0000000000)='./file0\x00', 0x111000, 0x8) [ 1153.148329] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1153.168736] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1153.190330] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:47 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0xffffffffffffffe0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() prlimit64(r2, 0xa, 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e0020001000000000000000068737230001c0000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:47 executing program 4 (fault-call:10 fault-nth:1): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:47 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:47 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:47 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x76, &(0x7f0000000140)={r2}, 0x8) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r2, &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={r3, 0x7, 0x4, [0x81, 0xfef, 0x5, 0x8001]}, &(0x7f00000001c0)=0x10) 15:38:47 executing program 2 (fault-call:0 fault-nth:1): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1153.384996] audit: type=1400 audit(1576769927.339:199): avc: denied { getrlimit } for pid=4594 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 [ 1153.417451] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:47 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c80000000000000100010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000040000000000000000000000000000000000000ac1414bbac14140000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00020010000000000000000000000000000000000000000400073657400000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000006925f2c5000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"/736], 0x2e0) [ 1153.441082] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1153.462171] FAULT_INJECTION: forcing a failure. [ 1153.462171] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.475216] CPU: 0 PID: 4608 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1153.483041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.492396] Call Trace: [ 1153.494983] dump_stack+0x142/0x197 [ 1153.498609] should_fail.cold+0x10f/0x159 [ 1153.502750] should_failslab+0xdb/0x130 [ 1153.506714] kmem_cache_alloc+0x2d7/0x780 [ 1153.510913] ? __might_sleep+0x93/0xb0 [ 1153.514823] __anon_vma_prepare+0x62/0x390 [ 1153.519057] do_huge_pmd_anonymous_page+0xc9d/0x1200 [ 1153.524169] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1153.528910] ? pmd_val+0xe0/0xe0 [ 1153.532265] __handle_mm_fault+0x247d/0x33d0 [ 1153.536661] ? copy_page_range+0x1de0/0x1de0 [ 1153.541077] ? find_held_lock+0x35/0x130 [ 1153.545141] ? handle_mm_fault+0x1b6/0x7c0 [ 1153.549379] handle_mm_fault+0x293/0x7c0 [ 1153.553455] __do_page_fault+0x4c1/0xb80 [ 1153.557511] ? vmalloc_fault+0xe30/0xe30 [ 1153.561578] do_page_fault+0x71/0x511 [ 1153.565373] page_fault+0x25/0x50 [ 1153.568811] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1153.574676] RSP: 0018:ffff888204e47d28 EFLAGS: 00010206 [ 1153.580028] RAX: ffffed100fd99536 RBX: 000000000000006d RCX: 000000000000006d [ 1153.587284] RDX: 000000000000006d RSI: ffff88807ecca940 RDI: 00000000200000c0 [ 1153.594539] RBP: ffff888204e47d58 R08: 1ffff1100fd99528 R09: ffffed100fd99536 [ 1153.601805] R10: ffffed100fd99535 R11: ffff88807ecca9ac R12: 00000000200000c0 [ 1153.609069] R13: ffff88807ecca940 R14: 00007ffffffff000 R15: 000000002000012d [ 1153.616339] ? _copy_to_user+0xb1/0xd0 [ 1153.620230] syslog_print_all+0x48e/0x790 [ 1153.624367] do_syslog+0x16b/0xb60 [ 1153.627902] ? __sb_end_write+0xc1/0x100 [ 1153.631950] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1153.636954] ? fput+0xd4/0x150 [ 1153.640133] ? SyS_write+0x15e/0x230 [ 1153.643836] SyS_syslog+0x26/0x30 [ 1153.647277] ? do_syslog+0xb60/0xb60 [ 1153.650975] do_syscall_64+0x1e8/0x640 [ 1153.654847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.659688] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1153.664863] RIP: 0033:0x45a919 [ 1153.668038] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1153.675733] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1153.682989] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1153.690243] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1153.697501] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1153.704755] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1153.713195] FAULT_INJECTION: forcing a failure. [ 1153.713195] name failslab, interval 1, probability 0, space 0, times 0 [ 1153.727338] CPU: 1 PID: 4612 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 15:38:47 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1153.735162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1153.744531] Call Trace: [ 1153.747134] dump_stack+0x142/0x197 [ 1153.750785] should_fail.cold+0x10f/0x159 [ 1153.754956] should_failslab+0xdb/0x130 [ 1153.758943] kmem_cache_alloc_node+0x287/0x780 [ 1153.763543] ? rt_add_uncached_list+0x139/0x190 [ 1153.768286] __alloc_skb+0x9c/0x500 [ 1153.771938] ? skb_trim+0x180/0x180 [ 1153.775581] sock_wmalloc+0xae/0xf0 [ 1153.779221] __ip_append_data.isra.0+0x1994/0x20f0 [ 1153.784175] ? save_trace+0x290/0x290 [ 1153.787993] ? raw_destroy+0x30/0x30 [ 1153.791718] ? trace_hardirqs_on+0x10/0x10 [ 1153.795972] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1153.801695] ? ipv4_mtu+0x25e/0x3a0 [ 1153.805327] ? raw_destroy+0x30/0x30 [ 1153.809171] ip_append_data.part.0+0xe7/0x160 [ 1153.813671] ? raw_destroy+0x30/0x30 [ 1153.817373] ip_append_data+0x5b/0x80 [ 1153.821165] raw_sendmsg+0xe49/0x2450 [ 1153.824964] ? dst_output+0x140/0x140 [ 1153.828752] ? avc_has_perm_noaudit+0x420/0x420 [ 1153.833410] ? process_measurement+0x58a/0xb80 [ 1153.837980] ? process_measurement+0x58a/0xb80 [ 1153.842559] ? sock_has_perm+0x1ed/0x280 [ 1153.846613] ? save_trace+0x290/0x290 [ 1153.850400] ? __lock_is_held+0xb6/0x140 [ 1153.854452] inet_sendmsg+0x122/0x500 [ 1153.858235] ? inet_recvmsg+0x500/0x500 [ 1153.862196] sock_sendmsg+0xce/0x110 [ 1153.865901] kernel_sendmsg+0x44/0x50 [ 1153.869688] sock_no_sendpage+0x107/0x130 [ 1153.873821] ? sock_kzfree_s+0x50/0x50 [ 1153.877713] inet_sendpage+0x3b8/0x580 [ 1153.881609] kernel_sendpage+0x92/0xf0 [ 1153.885479] ? inet_sendmsg+0x500/0x500 [ 1153.889440] sock_sendpage+0x8b/0xc0 [ 1153.893141] ? kernel_sendpage+0xf0/0xf0 [ 1153.897187] pipe_to_sendpage+0x242/0x340 [ 1153.901334] ? direct_splice_actor+0x190/0x190 [ 1153.905918] __splice_from_pipe+0x348/0x780 [ 1153.910229] ? direct_splice_actor+0x190/0x190 [ 1153.914805] ? direct_splice_actor+0x190/0x190 [ 1153.919368] splice_from_pipe+0xf0/0x150 [ 1153.923413] ? splice_shrink_spd+0xb0/0xb0 [ 1153.927635] ? security_file_permission+0x89/0x1f0 [ 1153.932551] generic_splice_sendpage+0x3c/0x50 [ 1153.937127] ? splice_from_pipe+0x150/0x150 [ 1153.941444] SyS_splice+0xd92/0x1430 [ 1153.945141] ? __sb_end_write+0xc1/0x100 [ 1153.949193] ? compat_SyS_vmsplice+0x250/0x250 [ 1153.954717] ? do_syscall_64+0x53/0x640 [ 1153.958675] ? compat_SyS_vmsplice+0x250/0x250 [ 1153.963247] do_syscall_64+0x1e8/0x640 [ 1153.967126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1153.971968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1153.977141] RIP: 0033:0x45a919 [ 1153.980316] RSP: 002b:00007fcbe62f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1153.988009] RAX: ffffffffffffffda RBX: 00007fcbe62f4c90 RCX: 000000000045a919 [ 1153.995265] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1154.002525] RBP: 000000000075c070 R08: 0000000000019404 R09: 0000000000000000 [ 1154.009787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe62f56d4 [ 1154.017048] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:48 executing program 2 (fault-call:0 fault-nth:2): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1154.037016] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)={0x3, 'bond_slave_1\x00', {0x3000}, 0x6}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000340)="736a98af34bd338a0d5712d0adab6f2905bc1e285dae94437b55fd9dabb1f6567601db882a81068eb2d6f84f9edb01ca2fc40efab8beaf7953d17b38ea7a2d0c97fefd3c32549a96df057d", 0x4b, r3}, 0x68) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000001500000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) [ 1154.097192] FAULT_INJECTION: forcing a failure. [ 1154.097192] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.117031] CPU: 1 PID: 4628 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1154.124879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.128041] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1154.134248] Call Trace: 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfffffe28) [ 1154.134269] dump_stack+0x142/0x197 [ 1154.134287] should_fail.cold+0x10f/0x159 [ 1154.134303] should_failslab+0xdb/0x130 [ 1154.134313] kmem_cache_alloc+0x2d7/0x780 [ 1154.134324] ? anon_vma_compatible+0x62/0x2a0 [ 1154.134339] __anon_vma_prepare+0x1b1/0x390 [ 1154.134352] do_huge_pmd_anonymous_page+0xc9d/0x1200 [ 1154.134365] ? __lock_is_held+0xb6/0x140 [ 1154.134374] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1154.134386] ? pmd_val+0xe0/0xe0 [ 1154.166332] __handle_mm_fault+0x247d/0x33d0 [ 1154.175743] ? copy_page_range+0x1de0/0x1de0 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0xaeb4f52525387631) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000380)={0x2, 0x0, 'client0\x00', 0x2, "d38709d7f00df6e6", "26fa73d3437b9bdba4b4b89edd74329cf956a6c4b37191b21eb9bb5ac891855b", 0x2, 0xffffffff}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x2e0) 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x6, 0x8, 0x2, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/932], 0x2e0) creat(&(0x7f0000000000)='./file0\x00', 0x0) [ 1154.175757] ? find_held_lock+0x35/0x130 [ 1154.175770] ? handle_mm_fault+0x1b6/0x7c0 [ 1154.206063] handle_mm_fault+0x293/0x7c0 [ 1154.210405] __do_page_fault+0x4c1/0xb80 [ 1154.214492] ? vmalloc_fault+0xe30/0xe30 [ 1154.218571] do_page_fault+0x71/0x511 [ 1154.222385] page_fault+0x25/0x50 [ 1154.225849] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1154.231753] RSP: 0018:ffff888204f47d28 EFLAGS: 00010206 [ 1154.237246] RAX: ffffed101431292a RBX: 000000000000004a RCX: 000000000000004a [ 1154.244761] RDX: 000000000000004a RSI: ffff8880a1894900 RDI: 00000000200000c0 [ 1154.252051] RBP: ffff888204f47d58 R08: 1ffff11014312920 R09: ffffed101431292a [ 1154.259333] R10: ffffed1014312929 R11: ffff8880a1894949 R12: 00000000200000c0 [ 1154.266962] R13: ffff8880a1894900 R14: 00007ffffffff000 R15: 000000002000010a [ 1154.274270] ? _copy_to_user+0xb1/0xd0 [ 1154.278235] syslog_print_all+0x48e/0x790 [ 1154.282404] do_syslog+0x16b/0xb60 [ 1154.288314] ? __sb_end_write+0xc1/0x100 [ 1154.292388] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1154.297419] ? fput+0xd4/0x150 [ 1154.300631] ? SyS_write+0x15e/0x230 [ 1154.304364] SyS_syslog+0x26/0x30 [ 1154.307837] ? do_syslog+0xb60/0xb60 [ 1154.311564] do_syscall_64+0x1e8/0x640 [ 1154.315469] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1154.315490] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1154.315500] RIP: 0033:0x45a919 [ 1154.325539] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1154.325552] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1154.325559] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1154.325564] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1154.325572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1154.365558] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:48 executing program 4 (fault-call:10 fault-nth:2): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:48 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x200, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000640)={0x3, 'bridge0\x00', {0x2908}, 0x2681}) clone(0xea00ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0xc0a, r1) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x11, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000680)='/dev/fuse\x00', 0x2, 0x0) preadv(r7, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000000080)=0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) close(r9) ioctl$SIOCGSTAMPNS(r9, 0x8907, &(0x7f0000000240)) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in=@empty, 0x4e23, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x140, 0x89, r6, r8}, {0xea, 0x7754, 0x1, 0x0, 0x480000, 0xbb1, 0xfa, 0x8}, {0x0, 0x8001, 0x200, 0x4a}, 0x0, 0x6e6bb3, 0x0, 0x0, 0xb4f730abe7ed7f90, 0x2}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d5}, 0xa, @in=@empty, 0x3500, 0x3, 0x0, 0x80, 0x1, 0x200, 0x7fff}}, 0xe8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:48 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:48 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = msgget$private(0x0, 0x218) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x27, 0x1, 0x1, 0x4, 0x1, 0x3, "a5318aedefcac86b4839c8ad7c6ef75a67de786a49cba8957ca942d61d710089e7ca0a9ade5ab8839a7ea1e1ddf9c4637ea53d8b1e11a5d4fd50984d377fe8", 0x2f}, 0x60, &(0x7f0000000080)=[{&(0x7f00000002c0)="14315caaf2b319bbd1e349989434ef8732ecfd9b3c1f732869081160417c881810e1771845016732d5e794daa7a1e728ade3eb73a1dbfa116c6aaedee068d06f00275af9f86eeb53a997ae9fd671d5d3bacc399e014b26e6c733b974ad75c6beac8fe5ba28defbe49f62eea41aa56a759552c9913eae0029277990333478475b01b668f7dc62da950284c1fc295e20f77276d2c2e93626d267b6299eaaea4628cfe1cd1e", 0xa4}, {&(0x7f0000000380)="cba3a4235c5ad060185906af8579098db4945c43c698fe3bec56ae314354adb5bfc0041e2d17f0d73c6bd60ef0acccb1c8043bb901a2e39b26a7ff57052940ba729d598e4a507973223a896fffb0a8bd512298e0747fee25baae205e9e3b28854c92afd519e0427b462b7d5e047d9d8b8eeb558c6a9f", 0x76}, {&(0x7f0000000400)="4cc1a7e0adfba2890b268491b3207e78f1b21fe62ea97716c68b323b9b944c3ba2d73cc8dbcea4aea9261d953e8da7ecd8f91d1cf3c9b0a9f2ed0a66bcaed7d0497c268d40bf964982494ea9777dd71f14c527e06231ec42f1d3b6c54919241f98aa1ebe7acb0120b3314bcf70373b99f5a9d6f7fa78a805413d8be8b26c023a50388fc716b646e51df0d79a19c3777578f95e2834783970b12f6e", 0x9b}, {&(0x7f00000004c0)="4bf61bf1f7ceeaa80858c13fad9ea3cded647987edddf878b4d7cc798868a2ba9ebf3a6d558a14c27f20a569cc5aa1a9ec977de669a566c4293b5a38fc0548ec054f5d386478996f", 0x48}], 0x4, &(0x7f0000000540)={0x40, 0x118, 0x4308, "f24db8dae99ec65cb072a1925bd66ec668342467fece40bd67e225338bb27b8c565b0da6a52672911a42db"}, 0x40, 0x40000}, 0x20000000) msgrcv(r0, &(0x7f00000001c0)={0x0, ""/213}, 0xdd, 0x3, 0x2000) 15:38:48 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, 0x0, 0x0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:48 executing program 2 (fault-call:0 fault-nth:3): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1154.558819] FAULT_INJECTION: forcing a failure. [ 1154.558819] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.559053] FAULT_INJECTION: forcing a failure. [ 1154.559053] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.575847] CPU: 1 PID: 4672 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1154.589306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.598824] Call Trace: [ 1154.601427] dump_stack+0x142/0x197 [ 1154.606350] should_fail.cold+0x10f/0x159 [ 1154.610497] should_failslab+0xdb/0x130 [ 1154.614587] kmem_cache_alloc+0x2d7/0x780 [ 1154.618757] __khugepaged_enter+0x37/0x340 [ 1154.622992] do_huge_pmd_anonymous_page+0xd3d/0x1200 [ 1154.628100] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1154.632981] ? pmd_val+0xe0/0xe0 [ 1154.636343] __handle_mm_fault+0x247d/0x33d0 [ 1154.640745] ? copy_page_range+0x1de0/0x1de0 [ 1154.645142] ? find_held_lock+0x35/0x130 [ 1154.649204] ? handle_mm_fault+0x1b6/0x7c0 [ 1154.653454] handle_mm_fault+0x293/0x7c0 [ 1154.657733] __do_page_fault+0x4c1/0xb80 [ 1154.661786] ? vmalloc_fault+0xe30/0xe30 [ 1154.665839] do_page_fault+0x71/0x511 [ 1154.669639] page_fault+0x25/0x50 [ 1154.673079] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1154.678961] RSP: 0018:ffff888204957d28 EFLAGS: 00010206 [ 1154.684338] RAX: ffffed100e49cdc2 RBX: 000000000000004a RCX: 000000000000004a [ 1154.691605] RDX: 000000000000004a RSI: ffff8880724e6dc0 RDI: 00000000200000c0 [ 1154.698877] RBP: ffff888204957d58 R08: 1ffff1100e49cdb8 R09: ffffed100e49cdc2 [ 1154.706136] R10: ffffed100e49cdc1 R11: ffff8880724e6e09 R12: 00000000200000c0 [ 1154.713391] R13: ffff8880724e6dc0 R14: 00007ffffffff000 R15: 000000002000010a [ 1154.720682] ? _copy_to_user+0xb1/0xd0 [ 1154.724573] syslog_print_all+0x48e/0x790 [ 1154.728715] do_syslog+0x16b/0xb60 [ 1154.732241] ? __sb_end_write+0xc1/0x100 [ 1154.736288] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1154.741291] ? fput+0xd4/0x150 [ 1154.744479] ? SyS_write+0x15e/0x230 [ 1154.748191] SyS_syslog+0x26/0x30 [ 1154.751648] ? do_syslog+0xb60/0xb60 [ 1154.755350] do_syscall_64+0x1e8/0x640 [ 1154.759236] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1154.764092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1154.769274] RIP: 0033:0x45a919 [ 1154.772459] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1154.780162] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1154.787426] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1154.794686] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1154.801951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1154.809209] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1154.816484] CPU: 0 PID: 4671 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1154.824284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1154.824289] Call Trace: [ 1154.824307] dump_stack+0x142/0x197 [ 1154.824324] should_fail.cold+0x10f/0x159 [ 1154.844027] should_failslab+0xdb/0x130 [ 1154.848013] kmem_cache_alloc_node_trace+0x280/0x770 [ 1154.853127] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1154.858591] __kmalloc_node_track_caller+0x3d/0x80 [ 1154.863535] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1154.868222] __alloc_skb+0xcf/0x500 [ 1154.871858] ? skb_trim+0x180/0x180 [ 1154.871876] sock_wmalloc+0xae/0xf0 [ 1154.871890] __ip_append_data.isra.0+0x1994/0x20f0 [ 1154.871901] ? save_trace+0x290/0x290 [ 1154.871919] ? raw_destroy+0x30/0x30 [ 1154.871929] ? trace_hardirqs_on+0x10/0x10 [ 1154.871944] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1154.902217] ? ipv4_mtu+0x25e/0x3a0 [ 1154.905862] ? raw_destroy+0x30/0x30 [ 1154.909584] ip_append_data.part.0+0xe7/0x160 [ 1154.914881] ? raw_destroy+0x30/0x30 [ 1154.918619] ip_append_data+0x5b/0x80 [ 1154.922434] raw_sendmsg+0xe49/0x2450 [ 1154.926263] ? dst_output+0x140/0x140 [ 1154.930087] ? avc_has_perm_noaudit+0x420/0x420 [ 1154.934780] ? process_measurement+0x58a/0xb80 [ 1154.939411] ? process_measurement+0x58a/0xb80 [ 1154.944009] ? sock_has_perm+0x1ed/0x280 [ 1154.948099] ? save_trace+0x290/0x290 [ 1154.951926] ? __lock_is_held+0xb6/0x140 [ 1154.956955] inet_sendmsg+0x122/0x500 [ 1154.960847] ? inet_recvmsg+0x500/0x500 [ 1154.964852] sock_sendmsg+0xce/0x110 [ 1154.968577] kernel_sendmsg+0x44/0x50 [ 1154.972391] sock_no_sendpage+0x107/0x130 [ 1154.976535] ? sock_kzfree_s+0x50/0x50 [ 1154.976563] inet_sendpage+0x3b8/0x580 [ 1154.976579] kernel_sendpage+0x92/0xf0 [ 1154.984334] ? inet_sendmsg+0x500/0x500 [ 1154.984351] sock_sendpage+0x8b/0xc0 [ 1154.984364] ? kernel_sendpage+0xf0/0xf0 [ 1154.984375] pipe_to_sendpage+0x242/0x340 [ 1154.984388] ? direct_splice_actor+0x190/0x190 [ 1155.007262] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1155.008733] __splice_from_pipe+0x348/0x780 [ 1155.008746] ? direct_splice_actor+0x190/0x190 [ 1155.008762] ? direct_splice_actor+0x190/0x190 [ 1155.008773] splice_from_pipe+0xf0/0x150 [ 1155.035042] ? splice_shrink_spd+0xb0/0xb0 [ 1155.036267] FAULT_INJECTION: forcing a failure. [ 1155.036267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1155.039292] ? security_file_permission+0x89/0x1f0 [ 1155.039310] generic_splice_sendpage+0x3c/0x50 [ 1155.039318] ? splice_from_pipe+0x150/0x150 [ 1155.039333] SyS_splice+0xd92/0x1430 [ 1155.068638] ? __sb_end_write+0xc1/0x100 [ 1155.072723] ? compat_SyS_vmsplice+0x250/0x250 [ 1155.076598] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1155.077310] ? do_syscall_64+0x53/0x640 [ 1155.077326] ? compat_SyS_vmsplice+0x250/0x250 [ 1155.077341] do_syscall_64+0x1e8/0x640 [ 1155.098483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1155.103325] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) close(r4) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) close(r7) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r10 = socket$pppoe(0x18, 0x1, 0x0) close(r10) r11 = socket$pppoe(0x18, 0x1, 0x0) splice(r7, &(0x7f0000000040)=0x9, r8, &(0x7f0000000080)=0x3, 0x401, 0x4) connect$pppoe(r11, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r12 = socket$pppoe(0x18, 0x1, 0x0) close(r12) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYRESDEC=r1, @ANYRES16, @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYRESOCT=r8, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r9, @ANYRES64=r10, @ANYRESDEC=0x0, @ANYRESOCT=r5, @ANYRES64=r8, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=0x0, @ANYRES16=r8, @ANYRESHEX=0x0, @ANYRESHEX=r11, @ANYRESDEC=r12, @ANYRES32, @ANYBLOB="6c81f71bdfd983841ef096b1f318405a8ccfde4615e11122355e121f3eedc2546cb4d9b2a2f587667958af721d8bb1e56640e904e7ffef8ef9ae7521a21fb44f5905baa5907ed17612758a96781d3cd785e108fe32cf957b67013f0804"], @ANYRES64, @ANYRES64=r13]], @ANYRESHEX], 0x7) 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$unix(0x1, 0x5, 0x0) recvfrom$unix(r2, &(0x7f0000000000)=""/50, 0x32, 0x40, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:48 executing program 2 (fault-call:0 fault-nth:4): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:48 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x204400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000380)={0x8, 0x0, 0x4, 0xfb79, 'syz0\x00', 0x7}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r4 = fcntl$dupfd(r0, 0x406, r3) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r2, 0xd700a000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000007584d79b00000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:49 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$pppoe(0x18, 0x1, 0x0) close(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}}, 0x0) sendmsg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="21e576261ba69821037a77e90be43556bc843a76514e1c3a2c76a1570d47015afd644e8c980f95e12a2998dae6d2ea9191bdce2eb2ab23cd8201e8d7f607ad97e25505ff3171ad4253ddba42cd22df75c55627010e4a0715f90af59e8a3bbd87f56cbd1d672cd9e93ab4ff080033ec839ddbbb37510075e16397913d5fb1392b4646d339b7527d0800980436c4420919a0c18d41b9b3d657b6018de2301517711d41a74bb73d15f48333929e6625675071dc5ceee9160f131ed3fa24c62882e46adf0a20e12de0156c1f0225465c9383b5e188a29ecfbc138b4e0af020ea", 0xde}, {&(0x7f0000000440)="14598ac362bf7be5f3f05e24c4978dc657c251bbc55cc553f743e891d05d0df55555bd7d36f1efe848410bc67b78d893b961a00dbcf42bb6be4a236e0f7d4771fc1846add013072a52d69f7e3843730b88557a94999e90f08f9c0f6d9b6071a65a66d7755c2058fee7bbf1ac7efb8fbec99c3d15d1626173eaad842ea424b9a2a9b82815ae1478bb5304d370eaf8e6dd4a0be088afa52234f9d3ce2e5f7429f317177a82a1e79119f2d740872d595ab5ed86bb522a72cbfaccc0a016a65da137c6257eb082f2", 0xc6}], 0x2}, 0x2000844) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000090000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000734f6574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030fc6064647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) r4 = socket$pppoe(0x18, 0x1, 0x0) close(r4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001780)={r4}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000017c0), &(0x7f0000001800)=0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0xf8, 0x3, 0x4, "bed27b1b9ae020114fc64789cb6d3cfa2ba87275fc9e97467b7093ef37e0a762bd1095d29aa7601688235c8bf8beee417a152aef6ce42d10028871a60bbb54618259cdb4560a335737d2f9ec74d2a10e61c9387ca73af1f8dde2003be2c75beb89cfd28c717148391d53dc837a60e167fb69dd85125e0b2f3c479262d4989422154702a04b6770756cc8d0a8b620fc0b0ea07e3fe81f5611dad73d6cc411ce5e678fabb842f7a8cc267296a1514be19eea87f99218dc84abab8621669b3a3b7baa5d0b9fb237641a47b90bd3d0d5eed35ce964b17b05ed89ca389eca3c256c63d59daa1f3ecca603815bb5c92a4242a12b260c6dd33d38d3"}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r6, 0x79aa}, &(0x7f0000000880)=0x8) [ 1155.108513] RIP: 0033:0x45a919 [ 1155.111699] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1155.119412] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1155.126688] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1155.133960] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1155.141236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1155.148501] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 [ 1155.155812] CPU: 1 PID: 4691 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1155.163628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.173013] Call Trace: [ 1155.175618] dump_stack+0x142/0x197 [ 1155.179261] should_fail.cold+0x10f/0x159 [ 1155.183426] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1155.188111] ? __khugepaged_enter+0x256/0x340 [ 1155.192628] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1155.197823] alloc_pages_vma+0x322/0x4c0 [ 1155.201895] do_huge_pmd_anonymous_page+0x389/0x1200 [ 1155.207024] ? thp_get_unmapped_area+0x1c0/0x1c0 [ 1155.211789] ? pmd_val+0xe0/0xe0 [ 1155.215168] __handle_mm_fault+0x247d/0x33d0 [ 1155.219601] ? copy_page_range+0x1de0/0x1de0 [ 1155.224001] ? find_held_lock+0x35/0x130 [ 1155.228059] ? handle_mm_fault+0x1b6/0x7c0 [ 1155.232299] handle_mm_fault+0x293/0x7c0 [ 1155.236347] __do_page_fault+0x4c1/0xb80 [ 1155.240407] ? vmalloc_fault+0xe30/0xe30 [ 1155.244487] do_page_fault+0x71/0x511 [ 1155.248294] page_fault+0x25/0x50 [ 1155.251735] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1155.257352] RSP: 0018:ffff888207c97d28 EFLAGS: 00010206 [ 1155.262705] RAX: ffffed1011e09f67 RBX: 0000000000000032 RCX: 0000000000000006 [ 1155.269960] RDX: 0000000000000002 RSI: ffff88808f04fb00 RDI: 00000000200000c0 [ 1155.277217] RBP: ffff888207c97d58 R08: 353131205b3e343c R09: ffffed1011e09f67 [ 1155.284469] R10: ffffed1011e09f66 R11: ffff88808f04fb31 R12: 00000000200000c0 [ 1155.291733] R13: ffff88808f04fb00 R14: 00007ffffffff000 R15: 00000000200000f2 [ 1155.299007] ? _copy_to_user+0xb1/0xd0 [ 1155.302885] syslog_print_all+0x48e/0x790 [ 1155.307021] do_syslog+0x16b/0xb60 [ 1155.310566] ? __sb_end_write+0xc1/0x100 [ 1155.314614] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1155.319631] ? fput+0xd4/0x150 [ 1155.322824] ? SyS_write+0x15e/0x230 [ 1155.326557] SyS_syslog+0x26/0x30 [ 1155.330018] ? do_syslog+0xb60/0xb60 [ 1155.333747] do_syscall_64+0x1e8/0x640 [ 1155.337644] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1155.342536] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1155.347729] RIP: 0033:0x45a919 [ 1155.350916] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 15:38:49 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:49 executing program 4 (fault-call:10 fault-nth:3): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:49 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2e0) 15:38:49 executing program 2 (fault-call:0 fault-nth:5): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1155.350927] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1155.350932] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1155.350938] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1155.350943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1155.350948] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1155.528432] FAULT_INJECTION: forcing a failure. [ 1155.528432] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1155.545675] CPU: 1 PID: 4722 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1155.553501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.563039] Call Trace: [ 1155.565636] dump_stack+0x142/0x197 [ 1155.569261] should_fail.cold+0x10f/0x159 [ 1155.573396] ? __might_sleep+0x93/0xb0 [ 1155.577276] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1155.581937] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1155.586948] alloc_pages_current+0xec/0x1e0 [ 1155.591259] pte_alloc_one+0x1a/0x100 [ 1155.595061] __pte_alloc+0x2a/0x2d0 [ 1155.598679] __handle_mm_fault+0x29fc/0x33d0 [ 1155.603088] ? copy_page_range+0x1de0/0x1de0 [ 1155.607492] ? find_held_lock+0x35/0x130 [ 1155.611563] ? handle_mm_fault+0x1b6/0x7c0 [ 1155.615793] handle_mm_fault+0x293/0x7c0 [ 1155.619847] __do_page_fault+0x4c1/0xb80 [ 1155.623902] ? vmalloc_fault+0xe30/0xe30 [ 1155.627954] do_page_fault+0x71/0x511 [ 1155.631751] page_fault+0x25/0x50 [ 1155.635194] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1155.641064] RSP: 0018:ffff888204aefd28 EFLAGS: 00010206 [ 1155.646418] RAX: ffffed100e324c12 RBX: 000000000000004a RCX: 000000000000004a [ 1155.653798] RDX: 000000000000004a RSI: ffff888071926040 RDI: 00000000200000c0 [ 1155.661059] RBP: ffff888204aefd58 R08: 1ffff1100e324c08 R09: ffffed100e324c12 [ 1155.668315] R10: ffffed100e324c11 R11: ffff888071926089 R12: 00000000200000c0 [ 1155.675575] R13: ffff888071926040 R14: 00007ffffffff000 R15: 000000002000010a [ 1155.682857] ? _copy_to_user+0xb1/0xd0 [ 1155.686739] syslog_print_all+0x48e/0x790 [ 1155.690881] do_syslog+0x16b/0xb60 [ 1155.694415] ? __sb_end_write+0xc1/0x100 [ 1155.698470] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1155.703509] ? fput+0xd4/0x150 [ 1155.706698] ? SyS_write+0x15e/0x230 [ 1155.710414] SyS_syslog+0x26/0x30 [ 1155.714044] ? do_syslog+0xb60/0xb60 [ 1155.717754] do_syscall_64+0x1e8/0x640 [ 1155.721928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1155.726793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1155.731982] RIP: 0033:0x45a919 [ 1155.735168] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1155.743132] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1155.750402] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1155.757668] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1155.764968] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1155.772239] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1155.783150] FAULT_INJECTION: forcing a failure. [ 1155.783150] name failslab, interval 1, probability 0, space 0, times 0 [ 1155.795323] CPU: 0 PID: 4725 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1155.803145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1155.812946] Call Trace: [ 1155.815633] dump_stack+0x142/0x197 [ 1155.819276] should_fail.cold+0x10f/0x159 [ 1155.823480] should_failslab+0xdb/0x130 [ 1155.827449] kmem_cache_alloc_node+0x287/0x780 [ 1155.832129] ? __kmalloc_node_track_caller+0x51/0x80 [ 1155.837333] __alloc_skb+0x9c/0x500 [ 1155.840958] ? skb_trim+0x180/0x180 [ 1155.844592] sock_wmalloc+0xae/0xf0 [ 1155.848250] __ip_append_data.isra.0+0x1994/0x20f0 [ 1155.854617] ? save_trace+0x290/0x290 [ 1155.858470] ? raw_destroy+0x30/0x30 [ 1155.862267] ? trace_hardirqs_on+0x10/0x10 [ 1155.866504] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1155.872256] ? ipv4_mtu+0x25e/0x3a0 [ 1155.875977] ? raw_destroy+0x30/0x30 [ 1155.879714] ip_append_data.part.0+0xe7/0x160 [ 1155.884225] ? raw_destroy+0x30/0x30 [ 1155.887980] ip_append_data+0x5b/0x80 [ 1155.894996] raw_sendmsg+0xe49/0x2450 [ 1155.898831] ? dst_output+0x140/0x140 [ 1155.902714] ? avc_has_perm_noaudit+0x420/0x420 [ 1155.907681] ? process_measurement+0x58a/0xb80 [ 1155.912263] ? process_measurement+0x58a/0xb80 [ 1155.916926] ? sock_has_perm+0x1ed/0x280 [ 1155.921510] ? save_trace+0x290/0x290 [ 1155.925365] ? __lock_is_held+0xb6/0x140 [ 1155.929630] inet_sendmsg+0x122/0x500 [ 1155.933612] ? inet_recvmsg+0x500/0x500 [ 1155.937742] sock_sendmsg+0xce/0x110 [ 1155.941498] kernel_sendmsg+0x44/0x50 [ 1155.945292] sock_no_sendpage+0x107/0x130 [ 1155.949986] ? sock_kzfree_s+0x50/0x50 [ 1155.954242] inet_sendpage+0x3b8/0x580 [ 1155.958226] kernel_sendpage+0x92/0xf0 [ 1155.962114] ? inet_sendmsg+0x500/0x500 [ 1155.966093] sock_sendpage+0x8b/0xc0 [ 1155.969809] ? kernel_sendpage+0xf0/0xf0 [ 1155.974004] pipe_to_sendpage+0x242/0x340 [ 1155.978335] ? direct_splice_actor+0x190/0x190 [ 1155.983022] __splice_from_pipe+0x348/0x780 [ 1155.987354] ? direct_splice_actor+0x190/0x190 [ 1155.991957] ? direct_splice_actor+0x190/0x190 [ 1155.996592] splice_from_pipe+0xf0/0x150 [ 1156.000928] ? splice_shrink_spd+0xb0/0xb0 [ 1156.005260] ? security_file_permission+0x89/0x1f0 [ 1156.010289] generic_splice_sendpage+0x3c/0x50 [ 1156.014977] ? splice_from_pipe+0x150/0x150 [ 1156.019298] SyS_splice+0xd92/0x1430 [ 1156.023053] ? __sb_end_write+0xc1/0x100 [ 1156.027126] ? compat_SyS_vmsplice+0x250/0x250 [ 1156.031880] ? do_syscall_64+0x53/0x640 [ 1156.036115] ? compat_SyS_vmsplice+0x250/0x250 [ 1156.040875] do_syscall_64+0x1e8/0x640 [ 1156.044753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1156.049611] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1156.055318] RIP: 0033:0x45a919 [ 1156.058502] RSP: 002b:00007fcbe62f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1156.066210] RAX: ffffffffffffffda RBX: 00007fcbe62f4c90 RCX: 000000000045a919 [ 1156.073610] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 15:38:50 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:50 executing program 5: clock_gettime(0x0, &(0x7f0000000080)) io_setup(0x5, &(0x7f0000000200)) io_getevents(0x0, 0x1, 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000001c0)={0x77359400}) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:50 executing program 2 (fault-call:0 fault-nth:6): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1156.081157] RBP: 000000000075c070 R08: 0000000000019404 R09: 0000000000000000 [ 1156.088426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe62f56d4 [ 1156.095793] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:50 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendto$isdn(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000100090000003cb9bbb46f376e76de23d63090b3bae57a15c1322a82f0f00b3d1309eb89ce7e6850b44020be2918cbbb084edabd91ec07ca1b544e511293d5a1009d6fad530607f942027372935e3c778c781288cf108a64bcfa3375dc4c710c53d3c3549024ec4ef6948ee286f828cae74edd21e0421cffc923"], 0x19, 0x20000000, &(0x7f0000000340)={0x22, 0x2, 0x60, 0x2, 0x2a}, 0x6) [ 1156.206053] FAULT_INJECTION: forcing a failure. [ 1156.206053] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.221650] CPU: 1 PID: 4742 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1156.229817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.239494] Call Trace: [ 1156.242221] dump_stack+0x142/0x197 [ 1156.246037] should_fail.cold+0x10f/0x159 [ 1156.250346] should_failslab+0xdb/0x130 [ 1156.250356] kmem_cache_alloc+0x2d7/0x780 [ 1156.250374] ptlock_alloc+0x20/0x70 [ 1156.250385] pte_alloc_one+0x60/0x100 [ 1156.250394] __pte_alloc+0x2a/0x2d0 [ 1156.250407] __handle_mm_fault+0x29fc/0x33d0 [ 1156.250423] ? copy_page_range+0x1de0/0x1de0 [ 1156.276730] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1156.279442] ? find_held_lock+0x35/0x130 [ 1156.279457] ? handle_mm_fault+0x1b6/0x7c0 [ 1156.279482] handle_mm_fault+0x293/0x7c0 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000340)=0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/attr/exec\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f00000004c0)={0xfffffffd, 0x2, 0x4, 0x10000, {0x0, 0x2710}, {0x4, 0x1, 0x8, 0x0, 0x0, 0x3f, "01ffb823"}, 0x1ff, 0x2, @planes=&(0x7f0000000400)={0x0, 0xdf26, @mem_offset=0x6, 0x9}, 0x4}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000380)={r3, 0x5}, &(0x7f00000003c0)=0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1156.291547] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1156.292382] __do_page_fault+0x4c1/0xb80 [ 1156.292399] ? vmalloc_fault+0xe30/0xe30 [ 1156.292415] do_page_fault+0x71/0x511 [ 1156.321711] page_fault+0x25/0x50 [ 1156.325336] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 1156.331597] RSP: 0018:ffff888204be7d28 EFLAGS: 00010206 [ 1156.337262] RAX: ffffed1013a191ba RBX: 000000000000004a RCX: 000000000000004a [ 1156.344824] RDX: 000000000000004a RSI: ffff88809d0c8d80 RDI: 00000000200000c0 [ 1156.344831] RBP: ffff888204be7d58 R08: 1ffff11013a191b0 R09: ffffed1013a191ba [ 1156.344837] R10: ffffed1013a191b9 R11: ffff88809d0c8dc9 R12: 00000000200000c0 [ 1156.344842] R13: ffff88809d0c8d80 R14: 00007ffffffff000 R15: 000000002000010a [ 1156.344873] ? _copy_to_user+0xb1/0xd0 [ 1156.344888] syslog_print_all+0x48e/0x790 [ 1156.344904] do_syslog+0x16b/0xb60 [ 1156.344918] ? __sb_end_write+0xc1/0x100 [ 1156.359927] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1156.359939] ? fput+0xd4/0x150 [ 1156.359948] ? SyS_write+0x15e/0x230 [ 1156.359963] SyS_syslog+0x26/0x30 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = msgget(0x3, 0x200) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{}, {}]}) msgrcv(r1, &(0x7f0000000340)={0x0, ""/145}, 0x99, 0x46059fbd4df9b449, 0x800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x100040, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000004c0)=0x1000, 0x4) sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x200}, 0x1c) r4 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000e0002001000000000000000000000000000000000000000040007365740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000700098000000dfffffffffffffff000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000000000"], 0x2e0) 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000340)=""/200) [ 1156.393023] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1156.395889] ? do_syslog+0xb60/0xb60 [ 1156.395906] do_syscall_64+0x1e8/0x640 [ 1156.395916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1156.395934] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1156.395945] RIP: 0033:0x45a919 [ 1156.437603] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1156.445365] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 15:38:50 executing program 4 (fault-call:10 fault-nth:4): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1156.452946] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1156.460398] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1156.467909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1156.475621] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 15:38:50 executing program 2 (fault-call:0 fault-nth:7): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:50 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x44, 0x80) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x4}) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1156.608097] net_ratelimit: 19 callbacks suppressed [ 1156.608103] ip_tables: iptables: counters copy to user failed while replacing table [ 1156.623756] FAULT_INJECTION: forcing a failure. [ 1156.623756] name failslab, interval 1, probability 0, space 0, times 0 [ 1156.630594] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1156.636087] CPU: 0 PID: 4774 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1156.649364] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1156.652859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.652865] Call Trace: [ 1156.652886] dump_stack+0x142/0x197 [ 1156.652907] should_fail.cold+0x10f/0x159 [ 1156.652926] should_failslab+0xdb/0x130 [ 1156.662485] FAULT_INJECTION: forcing a failure. [ 1156.662485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1156.671426] kmem_cache_alloc_node_trace+0x280/0x770 [ 1156.671442] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1156.671457] __kmalloc_node_track_caller+0x3d/0x80 [ 1156.671473] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1156.671486] __alloc_skb+0xcf/0x500 [ 1156.671496] ? skb_trim+0x180/0x180 [ 1156.671510] sock_wmalloc+0xae/0xf0 [ 1156.671523] __ip_append_data.isra.0+0x1994/0x20f0 [ 1156.671532] ? save_trace+0x290/0x290 [ 1156.671549] ? raw_destroy+0x30/0x30 [ 1156.671560] ? trace_hardirqs_on+0x10/0x10 [ 1156.671576] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1156.671585] ? ipv4_mtu+0x25e/0x3a0 [ 1156.671597] ? raw_destroy+0x30/0x30 [ 1156.671606] ip_append_data.part.0+0xe7/0x160 [ 1156.671628] ? raw_destroy+0x30/0x30 [ 1156.671639] ip_append_data+0x5b/0x80 [ 1156.671654] raw_sendmsg+0xe49/0x2450 [ 1156.671674] ? dst_output+0x140/0x140 [ 1156.698668] ? avc_has_perm_noaudit+0x420/0x420 [ 1156.698685] ? process_measurement+0x58a/0xb80 [ 1156.698699] ? process_measurement+0x58a/0xb80 [ 1156.698715] ? sock_has_perm+0x1ed/0x280 [ 1156.698735] ? save_trace+0x290/0x290 [ 1156.698750] ? __lock_is_held+0xb6/0x140 [ 1156.698763] inet_sendmsg+0x122/0x500 [ 1156.698772] ? inet_recvmsg+0x500/0x500 [ 1156.698785] sock_sendmsg+0xce/0x110 [ 1156.709627] kernel_sendmsg+0x44/0x50 [ 1156.709642] sock_no_sendpage+0x107/0x130 [ 1156.709654] ? sock_kzfree_s+0x50/0x50 [ 1156.709682] inet_sendpage+0x3b8/0x580 [ 1156.709696] kernel_sendpage+0x92/0xf0 [ 1156.842763] ? inet_sendmsg+0x500/0x500 [ 1156.846836] sock_sendpage+0x8b/0xc0 [ 1156.850555] ? kernel_sendpage+0xf0/0xf0 [ 1156.854703] pipe_to_sendpage+0x242/0x340 [ 1156.858894] ? direct_splice_actor+0x190/0x190 [ 1156.863543] __splice_from_pipe+0x348/0x780 [ 1156.867876] ? direct_splice_actor+0x190/0x190 [ 1156.872532] ? direct_splice_actor+0x190/0x190 [ 1156.877262] splice_from_pipe+0xf0/0x150 [ 1156.881390] ? splice_shrink_spd+0xb0/0xb0 [ 1156.885641] ? security_file_permission+0x89/0x1f0 [ 1156.890588] generic_splice_sendpage+0x3c/0x50 [ 1156.895231] ? splice_from_pipe+0x150/0x150 [ 1156.899910] SyS_splice+0xd92/0x1430 [ 1156.903634] ? __sb_end_write+0xc1/0x100 [ 1156.907723] ? compat_SyS_vmsplice+0x250/0x250 [ 1156.912315] ? do_syscall_64+0x53/0x640 [ 1156.916394] ? compat_SyS_vmsplice+0x250/0x250 [ 1156.920998] do_syscall_64+0x1e8/0x640 [ 1156.924924] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1156.929783] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1156.935031] RIP: 0033:0x45a919 [ 1156.938379] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1156.946123] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1156.953549] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1156.960941] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1156.968230] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1156.975610] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 [ 1156.983671] protocol 88fb is buggy, dev hsr_slave_0 [ 1156.984078] CPU: 1 PID: 4782 Comm: syz-executor.2 Not tainted 4.14.159-syzkaller #0 [ 1156.989132] protocol 88fb is buggy, dev hsr_slave_1 15:38:50 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:50 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000340)={0x4, 0x859fd713c91fba7b, 'client1\x00', 0xffffffff80000006, "59ddf1b6567c0e13", "3a19022d952e2cd8685ee49527d8cd0bf0aaa89663cc73422b0097e1511ae6bb", 0x1ff, 0x41}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) ioctl$int_in(r3, 0x5452, &(0x7f0000000400)=0xfffffffffffffe7c) [ 1156.997004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1156.997009] Call Trace: [ 1156.997025] dump_stack+0x142/0x197 [ 1156.997042] should_fail.cold+0x10f/0x159 [ 1156.997051] ? __might_sleep+0x93/0xb0 [ 1156.997066] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1157.032157] ? __pte_alloc+0x1a2/0x2d0 [ 1157.036314] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1157.041591] alloc_pages_vma+0xc9/0x4c0 [ 1157.045739] __handle_mm_fault+0x186c/0x33d0 [ 1157.050267] ? copy_page_range+0x1de0/0x1de0 [ 1157.054725] ? find_held_lock+0x35/0x130 [ 1157.055245] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1157.059103] ? handle_mm_fault+0x1b6/0x7c0 [ 1157.059130] handle_mm_fault+0x293/0x7c0 [ 1157.059145] __do_page_fault+0x4c1/0xb80 [ 1157.080682] ? vmalloc_fault+0xe30/0xe30 [ 1157.084927] do_page_fault+0x71/0x511 [ 1157.088763] page_fault+0x25/0x50 [ 1157.092243] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1157.094495] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:51 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/d\x00\x00\x01\x00us/< C\x06\xc1\x9de:00#\x00', 0x6f, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)="b0"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1157.098081] RSP: 0018:ffff8882040dfd28 EFLAGS: 00010202 [ 1157.098093] RAX: ffffed1012164ae0 RBX: 0000000000000039 RCX: 0000000000000007 [ 1157.098100] RDX: 0000000000000001 RSI: ffff888090b256c0 RDI: 00000000200000c0 [ 1157.098107] RBP: ffff8882040dfd58 R08: 353131205b3e343c R09: ffffed1012164ae0 [ 1157.098113] R10: ffffed1012164adf R11: ffff888090b256f8 R12: 00000000200000c0 [ 1157.098118] R13: ffff888090b256c0 R14: 00007ffffffff000 R15: 00000000200000f9 [ 1157.098146] ? _copy_to_user+0xb1/0xd0 [ 1157.153451] syslog_print_all+0x48e/0x790 [ 1157.157722] do_syslog+0x16b/0xb60 [ 1157.161421] ? __sb_end_write+0xc1/0x100 [ 1157.165526] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 1157.170754] ? fput+0xd4/0x150 [ 1157.173975] ? SyS_write+0x15e/0x230 [ 1157.177717] SyS_syslog+0x26/0x30 [ 1157.181311] ? do_syslog+0xb60/0xb60 [ 1157.185048] do_syscall_64+0x1e8/0x640 [ 1157.188951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.193989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1157.193998] RIP: 0033:0x45a919 [ 1157.194002] RSP: 002b:00007f6d04a7bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 15:38:51 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:51 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1157.194014] RAX: ffffffffffffffda RBX: 00007f6d04a7bc90 RCX: 000000000045a919 [ 1157.194019] RDX: 00000000000000d2 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1157.194029] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1157.194035] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6d04a7c6d4 [ 1157.194040] R13: 00000000004c8566 R14: 00000000004e4028 R15: 0000000000000003 [ 1157.194137] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.194187] protocol 88fb is buggy, dev hsr_slave_1 15:38:51 executing program 5: lsetxattr$security_selinux(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='secUr\a\x00y.selinux\x00', &(0x7f0000000080)='system_u:object_r:ppp_device_t:s0\x00', 0x22, 0x3) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1, 0xfff}}, 0x10) recvfrom$inet6(r0, &(0x7f00000001c0)=""/151, 0x97, 0x1, &(0x7f0000000280)={0xa, 0x4e22, 0xfffffffa, @ipv4={[], [], @remote}, 0x7}, 0x1c) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000100)) 15:38:51 executing program 2 (fault-call:0 fault-nth:8): syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:51 executing program 4 (fault-call:10 fault-nth:5): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:51 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25b) [ 1157.397818] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:51 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000000)={0x56, 0xfff, 0x2, 0xfffffffc, 0x33, 0x4}) 15:38:51 executing program 2: syslog(0x9, &(0x7f00000000c0)=""/209, 0xd1) [ 1157.460827] ip_tables: iptables: counters copy to user failed while replacing table [ 1157.478390] FAULT_INJECTION: forcing a failure. [ 1157.478390] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.494865] CPU: 1 PID: 4829 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1157.502712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1157.512411] Call Trace: [ 1157.515115] dump_stack+0x142/0x197 [ 1157.518861] should_fail.cold+0x10f/0x159 [ 1157.523051] should_failslab+0xdb/0x130 [ 1157.527052] kmem_cache_alloc_node+0x287/0x780 [ 1157.531810] ? __kmalloc_node_track_caller+0x51/0x80 [ 1157.537073] __alloc_skb+0x9c/0x500 [ 1157.540734] ? skb_trim+0x180/0x180 [ 1157.544376] sock_wmalloc+0xae/0xf0 [ 1157.548018] __ip_append_data.isra.0+0x1994/0x20f0 [ 1157.552959] ? save_trace+0x290/0x290 [ 1157.556776] ? raw_destroy+0x30/0x30 15:38:51 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) fcntl$setown(r0, 0x8, r1) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1157.560707] ? trace_hardirqs_on+0x10/0x10 [ 1157.565093] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1157.570823] ? ipv4_mtu+0x25e/0x3a0 [ 1157.574481] ? raw_destroy+0x30/0x30 [ 1157.574492] ip_append_data.part.0+0xe7/0x160 [ 1157.574505] ? raw_destroy+0x30/0x30 [ 1157.582989] ip_append_data+0x5b/0x80 [ 1157.583004] raw_sendmsg+0xe49/0x2450 [ 1157.583024] ? dst_output+0x140/0x140 [ 1157.583035] ? avc_has_perm_noaudit+0x420/0x420 [ 1157.583051] ? process_measurement+0x58a/0xb80 [ 1157.583064] ? process_measurement+0x58a/0xb80 [ 1157.583078] ? sock_has_perm+0x1ed/0x280 [ 1157.616444] ? save_trace+0x290/0x290 [ 1157.620392] ? __lock_is_held+0xb6/0x140 [ 1157.624654] inet_sendmsg+0x122/0x500 [ 1157.628480] ? inet_recvmsg+0x500/0x500 [ 1157.634464] sock_sendmsg+0xce/0x110 [ 1157.638335] kernel_sendmsg+0x44/0x50 [ 1157.642158] sock_no_sendpage+0x107/0x130 [ 1157.646333] ? sock_kzfree_s+0x50/0x50 [ 1157.650478] inet_sendpage+0x3b8/0x580 [ 1157.654399] kernel_sendpage+0x92/0xf0 [ 1157.658305] ? inet_sendmsg+0x500/0x500 [ 1157.662326] sock_sendpage+0x8b/0xc0 [ 1157.666065] ? kernel_sendpage+0xf0/0xf0 [ 1157.670148] pipe_to_sendpage+0x242/0x340 [ 1157.674319] ? direct_splice_actor+0x190/0x190 [ 1157.678928] __splice_from_pipe+0x348/0x780 [ 1157.683336] ? direct_splice_actor+0x190/0x190 [ 1157.687983] ? direct_splice_actor+0x190/0x190 [ 1157.687993] splice_from_pipe+0xf0/0x150 [ 1157.688007] ? splice_shrink_spd+0xb0/0xb0 [ 1157.688026] ? security_file_permission+0x89/0x1f0 [ 1157.688039] generic_splice_sendpage+0x3c/0x50 [ 1157.710948] ? splice_from_pipe+0x150/0x150 [ 1157.715450] SyS_splice+0xd92/0x1430 [ 1157.719310] ? __sb_end_write+0xc1/0x100 [ 1157.723547] ? compat_SyS_vmsplice+0x250/0x250 [ 1157.728150] ? do_syscall_64+0x53/0x640 [ 1157.732161] ? compat_SyS_vmsplice+0x250/0x250 [ 1157.736770] do_syscall_64+0x1e8/0x640 [ 1157.740678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1157.745657] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1157.750869] RIP: 0033:0x45a919 [ 1157.754085] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1157.762103] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1157.769386] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1157.777109] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1157.785973] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1157.793357] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 [ 1157.800995] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.806091] protocol 88fb is buggy, dev hsr_slave_1 [ 1157.830157] protocol 88fb is buggy, dev hsr_slave_0 [ 1157.835285] protocol 88fb is buggy, dev hsr_slave_1 15:38:51 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x19404, 0x0) 15:38:51 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) 15:38:51 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x1, 0x5dd3ac6ada07d97b, 0x2, {0x1, 0xffffffef, 0x6, 0x4}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/895], 0x2e0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) ptrace$setsig(0x4203, r3, 0x4, &(0x7f0000000080)={0x26, 0x94, 0x5}) 15:38:51 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r0 = msgget$private(0x0, 0x204) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/116) r1 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/231) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x103800, 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) close(r3) fstat(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r10, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$FUSE_LSEEK(r10, &(0x7f00000005c0)={0x18, 0x0, 0x5, {0xd765}}, 0x18) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setregid(r8, r11) r12 = getpgrp(0xffffffffffffffff) r13 = getpid() sched_setattr(r13, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x4, r4, r5, r6, r8, 0x8, 0xfff9}, 0x7ff, 0x101, 0x8, 0x0, 0x5, 0x1, r12, r13}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000600)='trusted.overlay.nlink\x00', &(0x7f0000000640)={'U-', 0x7}, 0x28, 0x1) 15:38:52 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:52 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000efffffff0000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000e1fed82836508558d400"], 0x2e0) 15:38:52 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x111840, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 15:38:52 executing program 4 (fault-call:10 fault-nth:6): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:52 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380), &(0x7f00000003c0)=0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) fcntl$getflags(r1, 0x40a) fsync(r2) r3 = dup(r2) write$P9_RMKNOD(r3, &(0x7f00000001c0)={0x14, 0x13, 0x2, {0x1, 0x2, 0x2}}, 0x14) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000340)=""/63, 0x3f}], 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200)) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') 15:38:52 executing program 1: clone(0x9a49ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:52 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syslog(0x7d00b22b, &(0x7f00000000c0)=""/208, 0xfffffffffffffd3f) rt_sigaction(0x1e, &(0x7f00000001c0)={&(0x7f0000000000)="c42299a78bc10000008f29a8019d00000080c4422d2c8cd47ab34bd33e0f554020c4415c5fe0c4c1ad565703f3ff9cb006000000c461a5e2dd6a410f2b862d00000100", {0x9906}, 0x40000000, &(0x7f0000000080)="c4c17813172e0f38094a00262ef3420f51a30f00000067f30f117605c4617bf018c4c245b7f540de797ddbe06667660f3a0e6b00082673426f"}, &(0x7f0000000280)={&(0x7f0000000200)="e2722ef2470fd016c4429d992bc4627508b665566666d9f564d9fec4c27d1859968f497812c765f0f754100b8f28e4a2bb080000001e", {}, 0x0, &(0x7f0000000240)="36260f8cd76e00000f01d7400fd30f461c06660f76b4f191669720660f3a63418f0043d8e0c42275bafa8f087096ee0e"}, 0xffffffffffffffb0, &(0x7f00000002c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$FUSE_POLL(r1, &(0x7f0000000300)={0x18, 0x0, 0x8, {0x3}}, 0x18) [ 1158.300904] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:52 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0)='/proc/self/net/pfkey\x00', 0x440000, 0x0) connect$vsock_dgram(r0, &(0x7f0000001700)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') clone(0x70209100, &(0x7f00000001c0)="6bd3c7363806e9fa826a9c61e8db0f5b3967386752bf71ebfcb0fb9a1efbb24be18362db14e12341138e765d1f9ac557e878f4b51c1c899c1fe41ec697bd9b2114206e1c03fc1479eea573724073f185e22036ad4552604594cc4363d4d010907ae5b8", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000380)="3aba7d8921cf3e8bdc06527bc90d8f797222559f29e7af040e3ad9706f54c4a514966dc72722f460468578ec3f3fb4b9d02d4a931e45c26884d7e6cc97c7ced8274eea0e9b84de18e745d56cb2dfe6efca3d858eb3e4bb8cd5d64f6e531aa26edb6fcd83947abaf23be3e8c33e7f1f0c291b76c3ee29f0e0191085f72ce0eed8deb19c85c2dcf865334cf4c7871e4e1fed7390acd8e960c9b2f6f79d66bdbc") bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, {0x63, 0x5, 0xf, 0x6, 0x1}, 0x0, 0x7}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) write$P9_RRENAME(r2, &(0x7f0000000300)={0x7, 0x15, 0x2}, 0x7) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x1, 0x0) r3 = accept4(r2, &(0x7f00000004c0)=@sco, &(0x7f0000000540)=0x80, 0x80000) getpeername$tipc(r3, &(0x7f0000000000)=@name, &(0x7f0000000040)=0xfffffffffffffffd) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1158.348782] FAULT_INJECTION: forcing a failure. [ 1158.348782] name failslab, interval 1, probability 0, space 0, times 0 [ 1158.376829] CPU: 0 PID: 4894 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1158.384847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1158.394312] Call Trace: [ 1158.394336] dump_stack+0x142/0x197 [ 1158.394358] should_fail.cold+0x10f/0x159 [ 1158.394376] should_failslab+0xdb/0x130 [ 1158.400610] kmem_cache_alloc_node_trace+0x280/0x770 [ 1158.400628] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 1158.400645] __kmalloc_node_track_caller+0x3d/0x80 [ 1158.400661] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1158.400673] __alloc_skb+0xcf/0x500 [ 1158.433431] ? skb_trim+0x180/0x180 [ 1158.437362] sock_wmalloc+0xae/0xf0 [ 1158.441195] __ip_append_data.isra.0+0x1994/0x20f0 [ 1158.446381] ? save_trace+0x290/0x290 [ 1158.450241] ? raw_destroy+0x30/0x30 [ 1158.453988] ? trace_hardirqs_on+0x10/0x10 [ 1158.458295] ? __ip_flush_pending_frames.isra.0+0x2d0/0x2d0 [ 1158.464126] ? ipv4_mtu+0x25e/0x3a0 [ 1158.467865] ? raw_destroy+0x30/0x30 [ 1158.471607] ip_append_data.part.0+0xe7/0x160 [ 1158.476136] ? raw_destroy+0x30/0x30 [ 1158.479960] ip_append_data+0x5b/0x80 [ 1158.483785] raw_sendmsg+0xe49/0x2450 [ 1158.487808] ? dst_output+0x140/0x140 [ 1158.491735] ? avc_has_perm_noaudit+0x420/0x420 [ 1158.494642] audit: type=1400 audit(1576769932.329:200): avc: denied { sys_admin } for pid=4896 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 1158.496590] ? process_measurement+0x58a/0xb80 [ 1158.496604] ? process_measurement+0x58a/0xb80 [ 1158.496621] ? sock_has_perm+0x1ed/0x280 [ 1158.496639] ? save_trace+0x290/0x290 [ 1158.538570] ? __lock_is_held+0xb6/0x140 [ 1158.544683] inet_sendmsg+0x122/0x500 [ 1158.548653] ? inet_recvmsg+0x500/0x500 [ 1158.552652] sock_sendmsg+0xce/0x110 [ 1158.556462] kernel_sendmsg+0x44/0x50 [ 1158.560383] sock_no_sendpage+0x107/0x130 [ 1158.564563] ? sock_kzfree_s+0x50/0x50 [ 1158.568489] inet_sendpage+0x3b8/0x580 [ 1158.572507] kernel_sendpage+0x92/0xf0 [ 1158.576568] ? inet_sendmsg+0x500/0x500 [ 1158.580741] sock_sendpage+0x8b/0xc0 [ 1158.580755] ? kernel_sendpage+0xf0/0xf0 [ 1158.580769] pipe_to_sendpage+0x242/0x340 [ 1158.580783] ? direct_splice_actor+0x190/0x190 [ 1158.580798] __splice_from_pipe+0x348/0x780 [ 1158.580807] ? direct_splice_actor+0x190/0x190 [ 1158.580823] ? direct_splice_actor+0x190/0x190 [ 1158.588931] splice_from_pipe+0xf0/0x150 [ 1158.615620] ? splice_shrink_spd+0xb0/0xb0 [ 1158.620064] ? security_file_permission+0x89/0x1f0 [ 1158.625052] generic_splice_sendpage+0x3c/0x50 [ 1158.629643] ? splice_from_pipe+0x150/0x150 [ 1158.634127] SyS_splice+0xd92/0x1430 [ 1158.638057] ? __sb_end_write+0xc1/0x100 [ 1158.642422] ? compat_SyS_vmsplice+0x250/0x250 [ 1158.647045] ? do_syscall_64+0x53/0x640 [ 1158.651193] ? compat_SyS_vmsplice+0x250/0x250 [ 1158.655909] do_syscall_64+0x1e8/0x640 [ 1158.659803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1158.664918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1158.670114] RIP: 0033:0x45a919 [ 1158.673714] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1158.681899] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1158.689658] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1158.697677] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1158.705097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1158.712383] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:52 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:52 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000340)=[0x80, 0x5]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) r7 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="323251a9f86acb8ed7c8793c4919fb261522a9235701cc474c50dd32165c9ef6eb2e94cd57e1fcf6affc5b63ff0dc8c4ec5aad3e1091cf10241ee795522bb09ffc3e2863540bdffdfaca9514faa306fb146468ad63a8b7c43ac62adb2d858a6e929b40a9cb9d99fc8f6d830b3856cf73ce0b3997a544f82e02e5c309b99fdd7a5d0557ac7839806d2550747a9944795fdefb2ee508c3bab0539c7f54d2c462ef4bf6962bd0", @ANYRES16=r7, @ANYBLOB="050c27bd7000ffdbdf2503be5e68f735f2a434c62bd4c28f88ccf965949c9f611190c0d4cea20944d3be9960c72101a91f009a4ab2a7a7c133875131e730f01a1981c09a274c8a1d6d3db1e05800000000000000"], 0x3}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r8, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r9, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='cm@l\x00\x00\x00\x00OSP\xca\xb0\xa4\xf3a\x06rzS\x98\x12\xed\xf8\x80\x00\x00\x000+\x92\xf5\xd8Gi\xb4[\x85\xb2Efk9\x8b\xccof\x96\xf2\xbe\xe5\xfe0K7\xeee\x01\xa5R5\x98\x06\xc4\x9a\xfdb\x1d\x8f\x00\r\x95e\x0e\x19\xa6_kW4\xfc\xbe\x9f\xc3;\xafi\x13}\x9cHt\xa0s\xa1\xebI\xed\xc6b\xe9\x81>\xeb\xa4hR\x97|\x01\xa0\xdb\xee(7^\xd2\x9a\x17\xa7\xce\x0e`\xbd\x1a\xd7I\xc9\x13O\x84\xdf6\xf3\xf1\xb9bcL\xd6\xf6\xb0y)\a\xcc\fS\xf7\xcd\x96\xbcj\x9a\xb19\xfcE\x99\xd3\x84v\x95\xc0\x0e\xfdRU+\xf94\x0e\x15\xaeM\xc7\xa9:\x1em\x9bv\xbf%\xc0\x035\xb4\xdaB\xdf\xae\x06\xff\x8e\x83\xe8\x96T\x1f@r&\x15\x94oX\xfe3\xb1J\xbd*\xd6\x92\x91Ga\x84o\xf6\xc8\x80R\x87\xe3\x1a\x92o\x00r\xf4\x9c\x86\xd4\x8c!(\xcb\xcc\x1ejY2\xaa\x05q3\x9e') preadv(r10, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1003050}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r10}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}]}, 0x74}}, 0xb35ec9b4e2dc8c44) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000006fb8887a6ef64868000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:52 executing program 2: syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)="79d29bfbbc82f28c7f2131ff0529e653dc9ca935c71e2821aec547a471075aae5a7324785ef1ed13a75181a55e4c61da362e26e545e47b56256bd96bd4d56ce44fe5e7090c22ac3fb7f29d9546fcd878135fbb001fb24593127fd59a5ad6582335f8b3775e1b7f238459c68343a42d6a5c2d428b", 0x74, 0x9}], 0x4000, &(0x7f0000000240)='\x00') r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x14200, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}, {{&(0x7f0000000280)={0x2, 0x4e1f, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@broadcast]}]}}}], 0x18}}], 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, 0x0, r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x7fff, 0x4e22, 0x6779, 0x2, 0x60, 0x180, 0x73, 0x0, r3}, {0x5, 0x1, 0x509e, 0x0, 0x5, 0x0, 0x100000001, 0x27e3}, {0x1, 0x1, 0x4, 0x5}, 0x20, 0x6e6bc0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x4d6, 0x33}, 0xa, @in=@remote, 0x3500, 0x4, 0x2, 0x1, 0x3570, 0x401, 0x400}}, 0xe8) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x44) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:52 executing program 1: clone(0x80000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_DUMPABLE(0x4, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00020010000000000000000000000000000000000000000400073657400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000000000000000000000000000280000000000000a9880e6100052c400000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) [ 1158.947658] IPVS: ftp: loaded support on port[0] = 21 15:38:52 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:53 executing program 2: syslog(0x3, &(0x7f00000001c0)=""/216, 0xd8) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0xef, 0x4) 15:38:53 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r1, &(0x7f00000003c0)={0x1, {&(0x7f0000000340)=""/34, 0x22, &(0x7f0000000380)=""/63, 0x1, 0x1}}, 0x68) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000440)={0x0, 0x80000001}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000543a303d9728000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:53 executing program 4 (fault-call:10 fault-nth:7): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:53 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xff8a) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000000)={0x1, 0x959, 0x5, 0x4, 0xffffffffffffffff, 0xffffffff, 0x9, 0x2, 0x0, 0x20, 0x5, 0x4}) [ 1159.212478] FAULT_INJECTION: forcing a failure. [ 1159.212478] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.224903] CPU: 0 PID: 4942 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1159.233378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1159.244423] Call Trace: [ 1159.247042] dump_stack+0x142/0x197 [ 1159.251190] should_fail.cold+0x10f/0x159 [ 1159.255461] should_failslab+0xdb/0x130 [ 1159.260448] kmem_cache_alloc+0x47/0x780 [ 1159.264561] skb_clone+0x129/0x320 [ 1159.268422] ip_mc_output+0x328/0xd40 [ 1159.272435] ? ip_queue_xmit+0x1b10/0x1b10 [ 1159.277087] ? __ip_make_skb+0xdd7/0x16c0 [ 1159.281661] ? rcu_read_lock_sched_held+0x110/0x130 [ 1159.287082] ? ip_append_data.part.0+0x160/0x160 [ 1159.287092] ? __ip_make_skb+0xe49/0x16c0 [ 1159.287106] ip_local_out+0x97/0x170 [ 1159.287120] ip_send_skb+0x3e/0xc0 [ 1159.287131] ip_push_pending_frames+0x64/0x80 15:38:53 executing program 2: syslog(0x9, &(0x7f00000000c0)=""/210, 0xd2) 15:38:53 executing program 2: syslog(0x3, &(0x7f00000001c0)=""/197, 0xfffffffffffffe4f) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480), 0x1, 0x7f) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0xff, 0x7}) [ 1159.287143] raw_sendmsg+0x1930/0x2450 [ 1159.287162] ? dst_output+0x140/0x140 [ 1159.287175] ? avc_has_perm_noaudit+0x420/0x420 [ 1159.296885] ? process_measurement+0x58a/0xb80 [ 1159.296901] ? process_measurement+0x58a/0xb80 [ 1159.296918] ? sock_has_perm+0x1ed/0x280 [ 1159.296937] ? save_trace+0x290/0x290 [ 1159.296952] ? __lock_is_held+0xb6/0x140 [ 1159.346521] inet_sendmsg+0x122/0x500 [ 1159.350720] ? inet_recvmsg+0x500/0x500 [ 1159.355222] sock_sendmsg+0xce/0x110 [ 1159.355237] kernel_sendmsg+0x44/0x50 [ 1159.355251] sock_no_sendpage+0x107/0x130 [ 1159.355261] ? sock_kzfree_s+0x50/0x50 [ 1159.355286] inet_sendpage+0x3b8/0x580 [ 1159.363206] kernel_sendpage+0x92/0xf0 [ 1159.363216] ? inet_sendmsg+0x500/0x500 [ 1159.363228] sock_sendpage+0x8b/0xc0 [ 1159.363239] ? kernel_sendpage+0xf0/0xf0 [ 1159.363252] pipe_to_sendpage+0x242/0x340 [ 1159.363267] ? direct_splice_actor+0x190/0x190 [ 1159.363285] __splice_from_pipe+0x348/0x780 [ 1159.363296] ? direct_splice_actor+0x190/0x190 [ 1159.363311] ? direct_splice_actor+0x190/0x190 [ 1159.363322] splice_from_pipe+0xf0/0x150 [ 1159.422696] ? splice_shrink_spd+0xb0/0xb0 [ 1159.427315] ? security_file_permission+0x89/0x1f0 [ 1159.432863] generic_splice_sendpage+0x3c/0x50 [ 1159.437560] ? splice_from_pipe+0x150/0x150 [ 1159.443278] SyS_splice+0xd92/0x1430 [ 1159.443289] ? __sb_end_write+0xc1/0x100 [ 1159.443327] ? compat_SyS_vmsplice+0x250/0x250 [ 1159.443339] ? do_syscall_64+0x53/0x640 [ 1159.443352] ? compat_SyS_vmsplice+0x250/0x250 [ 1159.443362] do_syscall_64+0x1e8/0x640 [ 1159.443371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1159.443389] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1159.443397] RIP: 0033:0x45a919 [ 1159.443401] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1159.493410] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1159.501655] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1159.509795] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1159.517678] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1159.526192] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000000)) 15:38:54 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x0, 0x10000, 0x3f, 0x80, 0x2}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000700000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000fb456be6cd862846000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028000000000000000000000000000000000000000000000000000089e2c4c600feffffff000000007bc568823a22622ab3ebefe437601019be30b203bf36fe1485551d4777a98263317694149c011d17af3e633f6cbb41cfb2740cfed6daa8b6cae4a54834c476cc607b909ac22655cf1dcba6af58568e0eb930afd067dff32789a38dbd40dc6a1c222b797ef9955cf4c8b53ab122edab296e7da2e297cf3d1eb0e77c2074233c656fd154b766d5c1aa5fefb7a67e734ffb270efee1ff"], 0xffffffffffffff14) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x50, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1c, &(0x7f0000000080)="b244264ae420cf447cb2caa5ada22c0722f26882fb3302c0ccb7a2527413d28114ba74441c9875f95e1e3e94e8f2cbc6dae4a3379cf0550e811a3c849023f698cf8b7ec9a12af13ba21651732b61e3dc2e84e0b2618f3d9036464610854e76e3fe42d5af967529995097c409e9e1912b4cd071bab31c24595149a73aa52f418ef324395b1670d0a436a3b24ef74c14e2f0bb005cc4b1", 0x96) setsockopt$inet6_dccp_int(r2, 0x21, 0xb, &(0x7f0000000040)=0x2, 0x4) 15:38:54 executing program 2: syslog(0x9, &(0x7f00000000c0)=""/210, 0xd2) 15:38:54 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:54 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:54 executing program 4 (fault-call:10 fault-nth:8): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1160.199354] FAULT_INJECTION: forcing a failure. [ 1160.199354] name failslab, interval 1, probability 0, space 0, times 0 [ 1160.212824] CPU: 1 PID: 4979 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1160.220822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1160.231007] Call Trace: [ 1160.233727] dump_stack+0x142/0x197 [ 1160.233746] should_fail.cold+0x10f/0x159 [ 1160.233763] should_failslab+0xdb/0x130 [ 1160.247070] kmem_cache_alloc_node_trace+0x5a/0x770 [ 1160.252343] ? is_bpf_text_address+0x7f/0x120 [ 1160.257045] __kmalloc_node_track_caller+0x3d/0x80 [ 1160.262371] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1160.267366] pskb_expand_head+0x116/0xc10 [ 1160.272307] ? __kernel_text_address+0xd/0x40 [ 1160.277329] ? unwind_get_return_address+0x61/0xa0 [ 1160.283372] ? __save_stack_trace+0x7b/0xd0 [ 1160.288510] __pskb_pull_tail+0xd8/0x1470 [ 1160.293446] ? depot_save_stack+0x11c/0x410 [ 1160.298252] skb_make_writable+0x108/0x370 [ 1160.302597] ttl_tg+0x7a/0x41a [ 1160.305818] ipt_do_table+0xafd/0x1770 [ 1160.309994] ? __lock_acquire+0x5f7/0x4620 [ 1160.314545] ? get_info+0x560/0x560 [ 1160.318441] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1160.323903] ? check_preemption_disabled+0x3c/0x250 [ 1160.329401] ? save_trace+0x290/0x290 [ 1160.333576] iptable_mangle_hook+0x9f/0x570 [ 1160.337988] ? __lock_is_held+0xb6/0x140 [ 1160.342204] ? check_preemption_disabled+0x3c/0x250 [ 1160.347363] nf_hook_slow+0xaf/0x1b0 [ 1160.351372] ip_mc_output+0x48b/0xd40 [ 1160.355176] ? ip_queue_xmit+0x1b10/0x1b10 [ 1160.359418] ? __ip_make_skb+0xdd7/0x16c0 [ 1160.363813] ? rcu_read_lock_sched_held+0x110/0x130 [ 1160.368849] ? ip_copy_addrs+0xe0/0xe0 [ 1160.373293] ? __ip_make_skb+0xe49/0x16c0 [ 1160.378043] ip_local_out+0x97/0x170 [ 1160.382209] ip_send_skb+0x3e/0xc0 [ 1160.386626] ip_push_pending_frames+0x64/0x80 [ 1160.391514] raw_sendmsg+0x1930/0x2450 [ 1160.395563] ? dst_output+0x140/0x140 [ 1160.399707] ? avc_has_perm_noaudit+0x420/0x420 [ 1160.405096] ? process_measurement+0x58a/0xb80 [ 1160.409789] ? process_measurement+0x58a/0xb80 [ 1160.414644] ? sock_has_perm+0x1ed/0x280 [ 1160.418986] ? save_trace+0x290/0x290 [ 1160.422992] ? __lock_is_held+0xb6/0x140 [ 1160.427485] inet_sendmsg+0x122/0x500 [ 1160.431379] ? inet_recvmsg+0x500/0x500 [ 1160.435854] sock_sendmsg+0xce/0x110 [ 1160.440769] kernel_sendmsg+0x44/0x50 [ 1160.445885] sock_no_sendpage+0x107/0x130 [ 1160.450673] ? sock_kzfree_s+0x50/0x50 [ 1160.454983] inet_sendpage+0x3b8/0x580 [ 1160.459228] kernel_sendpage+0x92/0xf0 [ 1160.464693] ? inet_sendmsg+0x500/0x500 [ 1160.469119] sock_sendpage+0x8b/0xc0 [ 1160.472852] ? kernel_sendpage+0xf0/0xf0 [ 1160.477136] pipe_to_sendpage+0x242/0x340 [ 1160.481834] ? direct_splice_actor+0x190/0x190 [ 1160.486811] __splice_from_pipe+0x348/0x780 [ 1160.491367] ? direct_splice_actor+0x190/0x190 [ 1160.496383] ? direct_splice_actor+0x190/0x190 [ 1160.503476] splice_from_pipe+0xf0/0x150 [ 1160.507917] ? splice_shrink_spd+0xb0/0xb0 [ 1160.512528] ? security_file_permission+0x89/0x1f0 [ 1160.517635] generic_splice_sendpage+0x3c/0x50 [ 1160.522343] ? splice_from_pipe+0x150/0x150 [ 1160.526983] SyS_splice+0xd92/0x1430 [ 1160.530793] ? __sb_end_write+0xc1/0x100 [ 1160.535293] ? compat_SyS_vmsplice+0x250/0x250 [ 1160.540655] ? do_syscall_64+0x53/0x640 [ 1160.544813] ? compat_SyS_vmsplice+0x250/0x250 [ 1160.550009] do_syscall_64+0x1e8/0x640 [ 1160.554531] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1160.559755] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1160.565301] RIP: 0033:0x45a919 [ 1160.568773] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1160.576939] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1160.584929] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1160.593325] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 15:38:54 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) 15:38:54 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = getpgrp(0x0) waitid(0x0, r0, &(0x7f0000000480), 0x5, 0x0) r1 = getpgid(r0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = getpid() r8 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = gettid() waitid(0x2c7c96e4f825ad55, r9, &(0x7f00000008c0), 0x80000000, &(0x7f0000000940)) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$key(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES16=r1, @ANYRESDEC, @ANYRES32, @ANYRES64], @ANYRESOCT=r10, @ANYRES64=r11, @ANYRES64], @ANYRESDEC=r9]], 0x8}}, 0x20004850) r12 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r12) kcmp(r12, r12, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ptrace$setopts(0x4206, r12, 0x0, 0x0) r13 = syz_open_dev$dmmidi(0x0, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x6d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r12, r13, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r14}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r9, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r14}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r14}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r14}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00', r14}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r14}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r6, 0x0, 0xd, &(0x7f0000000080)='trusted\\#&>#\x00', r14}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r5, 0x0, 0x13, &(0x7f0000000280)='em1{bdevbdevvmnet1\x00', r14}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r2, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00', r14}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r14}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r14}, 0xc) [ 1160.601077] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1160.608770] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:54 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 1160.705727] bridge0: port 3(gretap0) entered blocking state [ 1160.714145] bridge0: port 3(gretap0) entered disabled state [ 1160.730002] device gretap0 entered promiscuous mode [ 1160.743300] bridge0: port 3(gretap0) entered blocking state 15:38:54 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x138, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4e8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x250}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe46}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc7fc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x138}}, 0x4000006) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1160.750371] bridge0: port 3(gretap0) entered forwarding state 15:38:54 executing program 2: syslog(0x3, &(0x7f00000001c0)=""/221, 0xdd) 15:38:54 executing program 1: clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180959beb11000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:54 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1160.895678] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:54 executing program 4 (fault-call:10 fault-nth:9): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:54 executing program 5: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x4000)=nil) 15:38:55 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0) 15:38:55 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x88900, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x2) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x200, 0x20000) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/12, 0xc}, {&(0x7f0000000300)=""/5, 0x5}], 0x2, &(0x7f0000000380)=""/111, 0x6f}, 0x40000000) r3 = socket$pppoe(0x18, 0x1, 0x0) close(r3) r4 = socket$pppoe(0x18, 0x1, 0x0) close(r4) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x6) [ 1161.104185] FAULT_INJECTION: forcing a failure. [ 1161.104185] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1161.116949] CPU: 0 PID: 5024 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1161.125347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1161.135868] Call Trace: [ 1161.138846] dump_stack+0x142/0x197 [ 1161.143410] should_fail.cold+0x10f/0x159 [ 1161.147937] ? __lock_acquire+0x5f7/0x4620 [ 1161.152732] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1161.158081] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1161.163583] cache_grow_begin+0x80/0x400 [ 1161.167768] kmem_cache_alloc_node_trace+0x697/0x770 [ 1161.173008] ? is_bpf_text_address+0x7f/0x120 [ 1161.178087] __kmalloc_node_track_caller+0x3d/0x80 [ 1161.183520] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1161.188311] pskb_expand_head+0x116/0xc10 [ 1161.192261] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) socketpair(0x4, 0x807, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) [ 1161.192805] ? __kernel_text_address+0xd/0x40 [ 1161.208269] ? unwind_get_return_address+0x61/0xa0 [ 1161.213324] ? __save_stack_trace+0x7b/0xd0 [ 1161.217918] __pskb_pull_tail+0xd8/0x1470 [ 1161.222134] ? depot_save_stack+0x11c/0x410 [ 1161.226814] skb_make_writable+0x108/0x370 [ 1161.231273] ttl_tg+0x7a/0x41a [ 1161.235214] ipt_do_table+0xafd/0x1770 [ 1161.239513] ? __lock_acquire+0x5f7/0x4620 [ 1161.243806] ? get_info+0x560/0x560 [ 1161.247797] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1161.252833] ? check_preemption_disabled+0x3c/0x250 [ 1161.253760] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1161.258209] ? save_trace+0x290/0x290 [ 1161.258229] iptable_mangle_hook+0x9f/0x570 [ 1161.258240] ? __lock_is_held+0xb6/0x140 [ 1161.258254] ? check_preemption_disabled+0x3c/0x250 [ 1161.286336] nf_hook_slow+0xaf/0x1b0 [ 1161.290308] ip_mc_output+0x48b/0xd40 [ 1161.294601] ? ip_queue_xmit+0x1b10/0x1b10 [ 1161.299069] ? __ip_make_skb+0xdd7/0x16c0 15:38:55 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fstatfs(r1, &(0x7f0000000000)=""/77) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0xc8, 0x0, 0xc8, 0xc8, 0xc8, 0x208, 0x208, 0x208, 0x208, 0x208, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x0, [], 0x10}}}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="bb2c6bee678e", 0x6, 0x6, [0x3a, 0x2a, 0x36, 0x29, 0x35, 0x14, 0x2a, 0x39, 0x40, 0x21, 0x31, 0x1, 0x3c, 0x3, 0x3e, 0x11], 0x3, 0xca}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff7f) [ 1161.303533] ? rcu_read_lock_sched_held+0x110/0x130 [ 1161.308586] ? ip_copy_addrs+0xe0/0xe0 [ 1161.312669] ? __ip_make_skb+0xe49/0x16c0 [ 1161.317133] ip_local_out+0x97/0x170 [ 1161.321259] ip_send_skb+0x3e/0xc0 [ 1161.325255] ip_push_pending_frames+0x64/0x80 [ 1161.329996] raw_sendmsg+0x1930/0x2450 [ 1161.334962] ? dst_output+0x140/0x140 [ 1161.339811] ? avc_has_perm_noaudit+0x420/0x420 [ 1161.344863] ? process_measurement+0x58a/0xb80 [ 1161.350188] ? process_measurement+0x58a/0xb80 [ 1161.355354] ? sock_has_perm+0x1ed/0x280 [ 1161.359584] ? save_trace+0x290/0x290 [ 1161.363571] ? __lock_is_held+0xb6/0x140 [ 1161.368281] inet_sendmsg+0x122/0x500 [ 1161.372369] ? inet_recvmsg+0x500/0x500 [ 1161.376366] sock_sendmsg+0xce/0x110 [ 1161.380481] kernel_sendmsg+0x44/0x50 [ 1161.384308] sock_no_sendpage+0x107/0x130 [ 1161.388779] ? sock_kzfree_s+0x50/0x50 [ 1161.392697] inet_sendpage+0x3b8/0x580 [ 1161.396831] kernel_sendpage+0x92/0xf0 [ 1161.400740] ? inet_sendmsg+0x500/0x500 [ 1161.404969] sock_sendpage+0x8b/0xc0 [ 1161.408701] ? kernel_sendpage+0xf0/0xf0 [ 1161.412807] pipe_to_sendpage+0x242/0x340 [ 1161.417238] ? direct_splice_actor+0x190/0x190 [ 1161.421997] __splice_from_pipe+0x348/0x780 [ 1161.426330] ? direct_splice_actor+0x190/0x190 [ 1161.430937] ? direct_splice_actor+0x190/0x190 [ 1161.435627] splice_from_pipe+0xf0/0x150 [ 1161.439706] ? splice_shrink_spd+0xb0/0xb0 [ 1161.444365] ? security_file_permission+0x89/0x1f0 [ 1161.449461] generic_splice_sendpage+0x3c/0x50 [ 1161.454083] ? splice_from_pipe+0x150/0x150 [ 1161.458607] SyS_splice+0xd92/0x1430 [ 1161.462436] ? __sb_end_write+0xc1/0x100 [ 1161.466614] ? compat_SyS_vmsplice+0x250/0x250 [ 1161.471342] ? do_syscall_64+0x53/0x640 [ 1161.475422] ? compat_SyS_vmsplice+0x250/0x250 [ 1161.480017] do_syscall_64+0x1e8/0x640 [ 1161.483914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1161.488819] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1161.494014] RIP: 0033:0x45a919 [ 1161.497282] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1161.504998] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1161.512285] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1161.519983] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1161.527445] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1161.536817] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:55 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000000000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a640000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x2e0) 15:38:55 executing program 2: syslog(0x1, &(0x7f00000001c0)=""/196, 0xc4) 15:38:55 executing program 5: syslog(0x3, &(0x7f00000001c0)=""/230, 0xe6) 15:38:55 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xc8, 0x0, 0xc8, 0xc8, 0xc8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'netpci0\x00', 'bond0\x00', {0xff}}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0x8, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x183) 15:38:55 executing program 4 (fault-call:10 fault-nth:10): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:55 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:55 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000002c0)={0xa30000, 0x653b, 0x9, [], &(0x7f0000000280)={0x9a091c, 0x5, [], @value=0x9}}) r1 = socket$pppoe(0x18, 0x1, 0x0) close(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r3 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = syz_open_procfs(0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(r5, &(0x7f0000000100)={0x78, 0xffffffffffffffda, 0x6, {0x208, 0x7f, 0x0, {0x0, 0x5, 0x100000000000, 0x8001, 0x8, 0x9, 0x9, 0xffff4bd0, 0x78, 0x7fffffff, 0x0, 0xffffffffffffffff, r7, 0x8, 0x4}}}, 0x78) setregid(r4, r7) r8 = socket(0x0, 0x0, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = syz_open_procfs(0x0, 0x0) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$FUSE_ATTR(r10, &(0x7f0000000100)={0x78, 0xffffffffffffffda, 0x6, {0x208, 0x7f, 0x0, {0x0, 0x5, 0x100000000000, 0x8001, 0x8, 0x9, 0x9, 0xffff4bd0, 0x78, 0x7fffffff, 0x0, 0xffffffffffffffff, r12, 0x8, 0x4}}}, 0x78) setregid(r9, r12) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r2, @ANYBLOB="040001000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="30000200000000002000010000000000"], 0x3c, 0x3) 15:38:55 executing program 5: syslog(0x9, &(0x7f00000002c0)=""/230, 0x3b7) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x00\x00\x00\xf5\xeb\x00\x00\x00\x8c\x7f', 0x3e0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e7, 0x0, @perf_config_ext={0xffffffffffffff32, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x40403, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = open(0x0, 0x20141042, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2008000ffffffff) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@local}, 0x0, @in=@initdev}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002000)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000001000000000000000bd7795a7379d9b9fde050000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}}, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002100)=0x14, 0x100800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) [ 1161.910118] net_ratelimit: 20 callbacks suppressed [ 1161.910123] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.920683] protocol 88fb is buggy, dev hsr_slave_1 [ 1161.982255] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1161.991523] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.991580] protocol 88fb is buggy, dev hsr_slave_1 [ 1161.991681] protocol 88fb is buggy, dev hsr_slave_0 [ 1161.991733] protocol 88fb is buggy, dev hsr_slave_1 [ 1162.016841] ip_tables: iptables: counters copy to user failed while replacing table [ 1162.036274] FAULT_INJECTION: forcing a failure. [ 1162.036274] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.048719] CPU: 1 PID: 5076 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1162.056551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.066370] Call Trace: [ 1162.068980] dump_stack+0x142/0x197 [ 1162.072653] should_fail.cold+0x10f/0x159 [ 1162.077002] ? trace_hardirqs_on+0xd/0x10 [ 1162.081172] should_failslab+0xdb/0x130 [ 1162.085282] kmem_cache_alloc_node+0x56/0x780 [ 1162.089904] ? __lock_acquire+0x5f7/0x4620 [ 1162.094246] ? netlbl_enabled+0x9/0x60 [ 1162.098176] ? selinux_peerlbl_enabled+0xa2/0xd0 [ 1162.104235] __alloc_skb+0x9c/0x500 [ 1162.107881] ? skb_trim+0x180/0x180 [ 1162.111619] ip_do_fragment+0x964/0x2170 [ 1162.115962] ? mark_held_locks+0xb1/0x100 [ 1162.120785] ? ip_copy_metadata+0x9b0/0x9b0 [ 1162.125135] ip_fragment.constprop.0+0x148/0x200 [ 1162.130133] ip_finish_output+0x7bd/0xc60 [ 1162.134311] ip_mc_output+0x24a/0xd40 [ 1162.138138] ? ip_queue_xmit+0x1b10/0x1b10 [ 1162.143318] ? __ip_make_skb+0xdd7/0x16c0 [ 1162.144674] Unknown ioctl -1071622583 [ 1162.147697] ? rcu_read_lock_sched_held+0x110/0x130 [ 1162.147712] ? ip_fragment.constprop.0+0x200/0x200 [ 1162.147721] ? __ip_make_skb+0xe49/0x16c0 [ 1162.147735] ip_local_out+0x97/0x170 [ 1162.170696] ip_send_skb+0x3e/0xc0 [ 1162.174360] ip_push_pending_frames+0x64/0x80 [ 1162.179116] raw_sendmsg+0x1930/0x2450 [ 1162.183138] ? dst_output+0x140/0x140 [ 1162.187086] ? avc_has_perm_noaudit+0x420/0x420 [ 1162.191982] ? process_measurement+0x58a/0xb80 [ 1162.196691] ? process_measurement+0x58a/0xb80 [ 1162.201423] ? sock_has_perm+0x1ed/0x280 [ 1162.205574] ? save_trace+0x290/0x290 [ 1162.209409] ? __lock_is_held+0xb6/0x140 [ 1162.213745] inet_sendmsg+0x122/0x500 [ 1162.217649] ? inet_recvmsg+0x500/0x500 [ 1162.221789] sock_sendmsg+0xce/0x110 [ 1162.225642] kernel_sendmsg+0x44/0x50 [ 1162.229700] sock_no_sendpage+0x107/0x130 [ 1162.234019] ? sock_kzfree_s+0x50/0x50 [ 1162.237955] inet_sendpage+0x3b8/0x580 [ 1162.241879] kernel_sendpage+0x92/0xf0 [ 1162.245782] ? inet_sendmsg+0x500/0x500 [ 1162.249785] sock_sendpage+0x8b/0xc0 [ 1162.253522] ? kernel_sendpage+0xf0/0xf0 [ 1162.257602] pipe_to_sendpage+0x242/0x340 [ 1162.263646] ? direct_splice_actor+0x190/0x190 [ 1162.268270] __splice_from_pipe+0x348/0x780 [ 1162.272614] ? direct_splice_actor+0x190/0x190 [ 1162.277241] ? direct_splice_actor+0x190/0x190 [ 1162.281843] splice_from_pipe+0xf0/0x150 [ 1162.286111] ? splice_shrink_spd+0xb0/0xb0 [ 1162.290373] ? security_file_permission+0x89/0x1f0 [ 1162.295421] generic_splice_sendpage+0x3c/0x50 [ 1162.300014] ? splice_from_pipe+0x150/0x150 [ 1162.304603] SyS_splice+0xd92/0x1430 [ 1162.308332] ? __sb_end_write+0xc1/0x100 [ 1162.309904] Unknown ioctl -1071622583 [ 1162.312412] ? compat_SyS_vmsplice+0x250/0x250 [ 1162.312424] ? do_syscall_64+0x53/0x640 [ 1162.312436] ? compat_SyS_vmsplice+0x250/0x250 [ 1162.312448] do_syscall_64+0x1e8/0x640 [ 1162.312460] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1162.338522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1162.343972] RIP: 0033:0x45a919 [ 1162.347451] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1162.355419] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1162.362869] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1162.370280] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1162.377576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1162.385006] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:56 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:56 executing program 5: syslog(0x1, &(0x7f00000004c0)=""/236, 0xfffffffffffffdfc) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x2000, &(0x7f0000000080)={[{@nfs_export_on='nfs_export=on'}, {@metacopy_on='metacopy=on'}], [{@measure='measure'}, {@hash='hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'q'}}]}) 15:38:56 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x61809655}}}, 0x80) r1 = syz_open_pts(0xffffffffffffffff, 0x101000) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2e0) 15:38:56 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) socket$inet_udplite(0x2, 0x2, 0x88) 15:38:56 executing program 5: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) rt_sigreturn() 15:38:56 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x100, 0x84000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x0) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40800, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/49) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) 15:38:56 executing program 4 (fault-call:10 fault-nth:11): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:56 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:56 executing program 1: clone(0x891bbfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt(r1, 0x38, 0x0, &(0x7f0000000340)="43dd758076988afa68a8a7c7a121320e1fcea732afa1a52a343d44381551297542aedd0816e38d9e5a0ef3de640132da2e2fe16672963c18994d09ec11155c20249a84ee8ba1e41d4bcf023a5ec657a9062bd4481020732cc4ec8c86b0f078d7b183da1206f963f7ff48e2cb0a44a7988e91c024f583f0bd8f288ffc80e00cbbff87fe3e6234f0f408d1f82fac972f031762b9bfffb68df9a469ffebc762546df68d43aa3f5503c365949410d584d72fcf726c3ecc9db173250a68dde8969926f730635bb10e0e759d6974b738f1b0d95920cd0e1d4f", 0xd6) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000002000000000000000000000000000090000000300000080020000000000000000000000000000c800000000000000e8010000e8010000e8010000e8010000e8010000030000000000000000000000ac1e0001e000000100000000000000006873723000000000000000001000000065727370616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000c800000000000000000000000000000000000000000030006d61630000000000000000000000000000000000000000000000000000000180c2000000000000000000000000002800434f4e4e5345434d41524b000000000000000000000000000000000000000000000000000000ac1414bbac1414000000000000000000726f7365300000000000000000000000626f6e6430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000200100000000000000000000000000000000000000004000736574000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030006164647274797065000000000000000000000000000000000000000000000000000000000000000000000000000040004552524f5200000000000000000000000000000000000000000000000000383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000076928b608543700e94000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/736], 0x2e0) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, &(0x7f0000000000)) [ 1162.927944] ip_tables: iptables: counters copy to user failed while replacing table [ 1162.940945] FAULT_INJECTION: forcing a failure. [ 1162.940945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1162.953091] CPU: 1 PID: 5126 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1162.960956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1162.970448] Call Trace: [ 1162.973056] dump_stack+0x142/0x197 [ 1162.976705] should_fail.cold+0x10f/0x159 [ 1162.980868] ? nf_hook_slow+0xaf/0x1b0 [ 1162.984775] __alloc_pages_nodemask+0x1d6/0x7a0 [ 1162.989558] ? sock_no_sendpage+0x107/0x130 [ 1162.994030] ? inet_sendpage+0x3b8/0x580 [ 1162.998113] ? kernel_sendpage+0x92/0xf0 [ 1163.002472] ? sock_sendpage+0x8b/0xc0 [ 1163.006408] ? __alloc_pages_slowpath+0x2930/0x2930 [ 1163.011854] ? do_syscall_64+0x1e8/0x640 [ 1163.016104] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1163.022148] ? __lock_is_held+0xb6/0x140 [ 1163.026228] ? check_preemption_disabled+0x3c/0x250 [ 1163.031380] cache_grow_begin+0x80/0x400 [ 1163.035464] kmem_cache_alloc_node_trace+0x697/0x770 [ 1163.040597] ? __lock_acquire+0x5f7/0x4620 [ 1163.044953] __kmalloc_node_track_caller+0x3d/0x80 [ 1163.049996] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1163.054981] pskb_expand_head+0x116/0xc10 [ 1163.059149] ? __lock_acquire+0x5f7/0x4620 [ 1163.063625] ? xt_rateest_tg+0x172/0x1d0 [ 1163.067712] __pskb_pull_tail+0xd8/0x1470 [ 1163.072000] ? save_trace+0x290/0x290 [ 1163.075887] skb_make_writable+0x108/0x370 [ 1163.080190] ttl_tg+0x7a/0x41a [ 1163.083415] ipt_do_table+0xafd/0x1770 [ 1163.087323] ? __lock_acquire+0x5f7/0x4620 [ 1163.091579] ? trace_hardirqs_on+0xd/0x10 [ 1163.095763] ? get_info+0x560/0x560 [ 1163.099412] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 1163.104375] ? mark_held_locks+0xb1/0x100 [ 1163.108550] ? save_trace+0x290/0x290 [ 1163.112727] iptable_mangle_hook+0x9f/0x570 [ 1163.116394] QAT: Invalid ioctl [ 1163.117100] ? __lock_is_held+0xb6/0x140 [ 1163.124524] ? check_preemption_disabled+0x3c/0x250 [ 1163.124541] nf_hook_slow+0xaf/0x1b0 [ 1163.124559] ip_mc_output+0x94b/0xd40 [ 1163.124575] ? ip_queue_xmit+0x1b10/0x1b10 [ 1163.124583] ? __ip_make_skb+0xdd7/0x16c0 [ 1163.124594] ? rcu_read_lock_sched_held+0x110/0x130 [ 1163.124605] ? ip_fragment.constprop.0+0x200/0x200 [ 1163.134188] ? __ip_make_skb+0xe49/0x16c0 [ 1163.134203] ip_local_out+0x97/0x170 [ 1163.134217] ip_send_skb+0x3e/0xc0 [ 1163.134229] ip_push_pending_frames+0x64/0x80 [ 1163.134241] raw_sendmsg+0x1930/0x2450 [ 1163.134260] ? dst_output+0x140/0x140 [ 1163.145277] QAT: Invalid ioctl [ 1163.146461] ? avc_has_perm_noaudit+0x420/0x420 [ 1163.146480] ? process_measurement+0x58a/0xb80 [ 1163.146494] ? process_measurement+0x58a/0xb80 [ 1163.146509] ? sock_has_perm+0x1ed/0x280 [ 1163.146530] ? save_trace+0x290/0x290 [ 1163.207968] ? __lock_is_held+0xb6/0x140 [ 1163.207989] inet_sendmsg+0x122/0x500 [ 1163.219181] ? inet_recvmsg+0x500/0x500 [ 1163.223436] sock_sendmsg+0xce/0x110 [ 1163.224141] QAT: Invalid ioctl [ 1163.227344] kernel_sendmsg+0x44/0x50 [ 1163.227358] sock_no_sendpage+0x107/0x130 [ 1163.227369] ? sock_kzfree_s+0x50/0x50 [ 1163.227398] inet_sendpage+0x3b8/0x580 [ 1163.227412] kernel_sendpage+0x92/0xf0 [ 1163.227423] ? inet_sendmsg+0x500/0x500 [ 1163.254824] sock_sendpage+0x8b/0xc0 [ 1163.258877] ? kernel_sendpage+0xf0/0xf0 [ 1163.262960] pipe_to_sendpage+0x242/0x340 [ 1163.267323] ? direct_splice_actor+0x190/0x190 [ 1163.272161] __splice_from_pipe+0x348/0x780 [ 1163.276703] ? direct_splice_actor+0x190/0x190 [ 1163.281473] ? direct_splice_actor+0x190/0x190 [ 1163.286223] splice_from_pipe+0xf0/0x150 [ 1163.290873] ? splice_shrink_spd+0xb0/0xb0 [ 1163.295224] ? security_file_permission+0x89/0x1f0 [ 1163.300330] generic_splice_sendpage+0x3c/0x50 [ 1163.304954] ? splice_from_pipe+0x150/0x150 [ 1163.309463] SyS_splice+0xd92/0x1430 [ 1163.313261] ? __sb_end_write+0xc1/0x100 [ 1163.317523] ? compat_SyS_vmsplice+0x250/0x250 [ 1163.322115] ? do_syscall_64+0x53/0x640 [ 1163.326098] ? compat_SyS_vmsplice+0x250/0x250 [ 1163.330767] do_syscall_64+0x1e8/0x640 [ 1163.334660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1163.339518] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1163.344715] RIP: 0033:0x45a919 [ 1163.347904] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1163.355855] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1163.363135] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1163.370546] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 15:38:57 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', {}, 0x20}) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:57 executing program 5: syslog(0xf198e709, &(0x7f00000003c0)=""/218, 0xda) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) rt_sigsuspend(&(0x7f00000000c0)={0x800}, 0x8) [ 1163.378121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1163.385407] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:57 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xffffffff, &(0x7f0000000000)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x80, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r7, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r9, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) io_submit(r1, 0x6, &(0x7f0000000940)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, 0x9, r0, &(0x7f0000000340)="bd0908fac6544bff2eac860d2e1948ce218715013f378211541c4cf32e751f3210d34fd6837a233b1dce29f0d483e33d8769cd334e75a22ffed9c74db886f8aaef5d6ad08ee92637e38d7ef4505a01944434a9aca2522e0c01647daa179e9e2cb742c86743097ef3", 0x68, 0xfffffffffffffffe, 0x0, 0x7, r2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000440)="36bc86c6f7d6b53cd7ea362b04ccb725a95ed29874ba7381543fa9b60e2539ffb120ba68af29a08b557f79e7abe3e5326179fdd1d8651d763d9816c3f064a1b4f13790958622a38d2d7c6f816118c3037591add922b32d9ee4d7f9b02fda87b9588aa8f9f1a8984f0a22624cd195748a6e96b2aecb56ac0f58", 0x79, 0x7f, 0x0, 0x0, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x7f, r4, &(0x7f0000000540)="c2be80b8dcb255622f86afb58f02e7506de0a9b400d22f7031b7978e8fdcbb90e7db3d732be472389e47d2025443274900e95cddd77bb9206270672b1ef2b228f071251ece98fd824a0dda6c6db1912a1fac856a6aced5c0c55770b7ba01e99c61b6a0da94fafe1a9edce05ba2ad4791e9c42b78afdbedd4a0dfc40b7f65ed732fbfd343c53dccd5c4c210505135f7d8c4ceb98645399bc54de2dfb6493c7174d46c2d", 0xa3, 0x1ff, 0x0, 0x2, r5}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x4, 0x401, r0, &(0x7f0000000680)="43c7c0684e0adb98cc33146a9e7954ff70a1a9372e81de8f5f3f163b5c95b704ff21bbafdb6b7e6838f87c0f2aa06dcc96e7f2a7f041dea6f93dcc52e551c11ba6d2b1c662c038f5369edd6f00ee2175a0ee", 0x52, 0x100000000, 0x0, 0x0, r6}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000000740)="97d6d2affabaceb180c11179242f596ab6fb8f4b9efadc84cc2087ed6719375be3ee1002b65bf522081abd08d5b83abb166ba54b4a48f07ce192fcd756263900b649b802f0a5010fff874b727af5fda28ee27628197d9e374368dd6e4cc8c916d8bc46e3f6f6a4ec3920ae661cd81475b9e9eff0f5938ba824d21cd25f0498dd9c7e4a30e52cf947ffe25f961fd121b9caa713a4ecd39a56fbe35dbd9891e9cbfdbbe4897211c21919c1e1ac1272875ab3a801c57cddc3d0b8", 0xb9, 0x101, 0x0, 0x1, r7}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0xff, r8, &(0x7f0000000840)="9b3f067cfe94450f3f114e59b551fa4befb5be2362ab1a8fec003354426ce6ce428fe874f060a10ca94f7adcf4e31218b2b07625185f2b55b7172c32675929acebc3b34cdda156c7ddf6af7af0397fd016133ecfcf93f20e52eb10db43030b32b131688b70852ff891b9685e8dde2be82251b79b13f392735c798eeb561b76cd13ed4890907f7ca9bba12d0c8b71a132562983da2a9232f1c5a94157da85184b97e8456aef5031d79c2ee1ffc5706b3d1373d7f4ea", 0xb5, 0xfffffffffffffff8, 0x0, 0x0, r9}]) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2282, &(0x7f0000000980)) close(r10) r11 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 15:38:57 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:57 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xffffff3b) 15:38:57 executing program 2: syslog(0x1, &(0x7f00000001c0)=""/213, 0xbe) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x80200000) [ 1163.600145] protocol 88fb is buggy, dev hsr_slave_0 [ 1163.605475] protocol 88fb is buggy, dev hsr_slave_1 15:38:57 executing program 4 (fault-call:10 fault-nth:12): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:57 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1163.703945] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. 15:38:57 executing program 1: clone(0x8809ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'hsr0\x00', 'erspan0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={0x30, 'mac\x00', 0x0, {@link_local}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@remote, @dev, 0x0, 0x0, 'rose0\x00', 'bond0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00'}, @common=@addrtype={0x30, 'addrtype\x00'}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "383705cd237d69151af57dc127d5141f978f5dd3bef0689a0e0f1b387a64"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) r2 = socket$pppoe(0x18, 0x1, 0x0) close(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000440)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000a00)=0xe8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x11, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000001740)={0x0, @xdp={0x2c, 0x4, 0x0, 0x14}, @isdn={0x22, 0x7, 0x43, 0x7, 0x9}, @xdp={0x2c, 0x9, r7, 0x28}, 0xfb5f, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001700)='sit0\x00', 0x81, 0x7f, 0x4}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x11, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x34, 0x11, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r14}, [@IFLA_IFNAME={0x14, 0x3, 'veth1\x00'}]}, 0x34}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001e40)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}}}}], 0x88}}, {{&(0x7f0000000640)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000680)="dd4fc799709d2b27ec943e4b1f3f9ad33d1f1f8cde145eed92fe20398c91941babb14588d98e09d722798918f1af773debd079d3bc4d0e878e077304ab4b6373ad616f62dab3", 0x46}, {&(0x7f0000000700)="c50c87f05a5aa7d27c37d0d8983acf448e813675529594e92e73f5b055c71022e548796681121df68d80cec1eca88f552301e5fb86af24d4505ce3089ed40f5dc17aef0bd34e137b90c36ebf99bc976b9709129bb295900e253ee158c53a48e7289d2e76bc6485311917676b0e4049971a26d406193def744e40de5a37eb87f72b11e81e61fd33d58258ca9c688a8e4f38631fd0f402d2316a4fd7458a2d2f85f0b01265a951b366428a100e3d30f8984866a1ed5ef9f3ba5593bf61a61027fe377cf4866d20a328e8d35358d9c47bb7cacf34cc75c54b03cd706a70876125d75208388ac0e0e66d8874c8c099c604145a7b426f", 0xf4}, {&(0x7f0000000800)="9ed2859d4ac6ecbc3e5ee40d5514ad6bb622bf82a36432612a4cb077e7e986c9f884dd7f3ee2ad5575a1a373c22e69ed73e583aa531356a6afded4e05f0e819e304ea34d38aa7200cf0dddb937aa404ee619e60b2f8b8ebfd2c77481430dc0577c47b236264788054c94d62e4c9c66ff81969e0431026a2fd845dabe3323af35424fd80e4983fbd4bb43151b0190ae88ca3a52c4bbae75c2842e0cc5596326cd17545d256003bc79e7e44ac23887344d64c43530c7c385cb52225a6c2cfa", 0xbe}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x40, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@end, @rr={0x7, 0x2b, 0x4, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x23}, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, @multicast2, @remote, @multicast1, @empty]}, @cipso={0x86, 0x26, 0x8cc, [{0x6, 0x4, "1d25"}, {0x6, 0xa, "a269129d083f5a8b"}, {0x4, 0x4, "10bb"}, {0x5, 0xe, "2f055749159eb86d5d395ceb"}]}, @cipso={0x86, 0x23, 0x81, [{0x0, 0x2}, {0x1, 0x2}, {0x7, 0x6, "bf0c9983"}, {0x0, 0x8, "93d3b4178bcf"}, {0x0, 0xb, "81e1314f2ef48b4e59"}]}, @rr={0x7, 0x2b, 0xff, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x7ae620a9, @rand_addr=0xffffffff, @loopback]}, @noop, @noop, @lsrr={0x83, 0x1f, 0x1, [@dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0xc}, @multicast1, @multicast2, @rand_addr=0xa7, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0xc, 0x800, [{0x2, 0x6, "7d1c35d9"}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @multicast2}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x44, 0xd, "cf41d0b54d8272b999f98a"}, @noop, @ra={0x94, 0x6, 0x4}, @ssrr={0x89, 0x7, 0x0, [@local]}, @timestamp={0x44, 0x18, 0x8, 0x1, 0x2, [{[@multicast1], 0x3f}, {[], 0x1ff}, {[@broadcast], 0xa8d2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0xac, 0x0, 0x7, {[@generic={0x0, 0x12, "5fec51679db205d3106ed81e25f16dc4"}, @generic={0x1, 0x12, "17b033566d7cb68c6e37428d7aeacea4"}, @ssrr={0x89, 0x27, 0x92, [@multicast2, @broadcast, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @local, @empty, @loopback]}, @generic={0x94, 0xf, "622559fff3e91011e8644722e7"}, @rr={0x7, 0x23, 0x4, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x80000001, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @broadcast]}, @noop, @timestamp={0x44, 0x1c, 0x40, 0x0, 0x9, [{[@loopback], 0x8}, {[@initdev={0xac, 0x1e, 0x1, 0x0}], 0x22}, {[@local], 0x88}]}]}}}], 0x280}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="13071643d0e2c6bf7f79d9c5fc4c9525fc6a598af7c13b7c9b0eac88a5ee5bcf53cb6c8bb20d0a27fe1ae440899034e3f46970ab262657bd205a76a77fd02783e3a14edc2e280c37c1baadbbc3d7d83fea9fbfa6da728a59a7f83ec051cc9ef8edb10f632d68060db90a2750c5286cc7f23ebc0a21496647e5c4ff6d5ca20fd83b4d29bffa64af90", 0x88}, {&(0x7f0000000d80)="531b17c6ab9d776efa256f5e7bfbd8d0aef11880f15a7f76d56fe95c5b00daecd2a7019be0497b15b6b68734a125", 0x2e}], 0x2, &(0x7f0000000e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x18}}, {{&(0x7f0000000e40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000e80)="308f1f761ee0a3a25abe0d25a1566a4a464827f080e169b51a14a7edefdc9594af4d726f94e86b15584de51f982e4f7314ce2ce9d05079305614ff3033c4edac964b7d5482a89d8743d5826031b898d0e7b3859105915921dd2b2f400243b36a20b5012ad599739614dd44b71ffcfd8e2b489b571177b691e5e6bcfe6addec0f3d20755cd063488e162ec5380b95818b7bb24f22e1a8", 0x96}, {&(0x7f0000000f40)="f829cbcd4c8a87cbb8aa47a9afbcb5e54e66efae562e227c9d81dcd005d79d4cfd5b75cba2218c856e476284ed32a0e8cde776d7fc2d00ace01dc936a5e3c743460ac620aabd68870483db57095dff0783edf815af8cf4575ead2c43c1b171645b3107915fafaea773ef94958be16e2ddf950b1ddf5c1331cd4e51c504d3f333f5b68d87c6af693e2f5939d9e4298b9dd7fcc73171b7632e895e194724499df90c1b94a38d061535357aa47208813f08e928d7931572a4a3ee0ffa686530d7964a5e3f22055c821d1518a8de20835cd7d43496087fb08d3aeabbf392de84cd8ce2a44a76133ff850d463b6df257fcdd5b5c882be", 0xf4}, {&(0x7f0000001040)="d4396d0a82cdcea2190df000b5a6a32e1420a0aaf235734ac3a70533f2cc666ec85549de2b9d182d600c75bdaccfb1a4cafb6ea860b3a726797b2667ad8c5dcf48484520a26e8cf147c33f71cf7ef46bc1feadbbc22357f32b70af10d3d9b5e4b84c2cf0a24a48190a29cd5340fa738c61b400bc057f0edb315ebfe19888fade01c28bb63f32034f69534ef48618b82dc223e5cf431f8349c9a3de13e887a09c3ce631f51a22603e41535f31685625e15fbcedbd1919c638e5ff7f2b826ec3849eb973c018ee", 0xc6}, {&(0x7f0000001140)="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", 0xfd}, {&(0x7f0000001240)="1707118a321c6bf88e4d094cf95c81e193a9c32daebbdd7082142932ae003c814c31f7c645f78ed2237dde7db4d273756e45f395290142e938c5a174249bede93606a5ca7edabc8a4021303c88975ec00bac7a11ba5039db214bf755e3f7eb5bd6db902716d094a0fa4390c7bfa82e26a989f08727347171dfbd13fefd6bc00faff03aa8f9a2aeb1501b31a4a0e41b43d5b838", 0x93}, {&(0x7f0000001300)="70d45cc828e4528d16b0100db1f2ab7f1e8fbfba14c3d7eb1ef3f0882e49c3cd29d7e742c073b88c6039dd2ec64a5b12e7eb988cf184690295d6fff48117e1895cc89169c77d30631aaf5dc29aa5e420da64ba9baf3fcc1a13373fe43ed8738a", 0x60}, {&(0x7f0000001380)="b164d246912c918f828c6f5481ac3240caedb08da6bc8953f99f9985111e2d83448d3b4f49c5d5308730dbe5db7d0056515849b6f8c9e05f5f1a7f67e1337403189701def214c6d59fae4aba0b61ffd7f6dfbb3b5c81ed696289138d037976fd01391e8f8b95fc6658fe22bd5d83fc405027035d6f8d90cbd6701d77b99ad8a593cdd89c5d1aace8cdfb8e9c870e1dcb2f9811f2da863110ec68ff304e692a6f84238afa77c6f129d100e40e8872c2624b7b47396306b21d32c7ff693661b94265f7611a296011dbf8fed5804b", 0xcd}, {&(0x7f0000001480)="06ba5ea7e59706fd73e870a837ff4c3e18ad08caf60fcb508f391cb47b781a6ea8edb27ad38427aba9caebaf543eea8649ff509b18056774bd419c3af5280c09a350c4d274f99daa0a2cfa8c44ab90c3118ccacde97f48", 0x57}, {&(0x7f0000001500)="59ad055d675392e8ff0f3b67159f5677e5f44be95ded72c67f317d889d4a5f1dc16f8f82f4358c170f2446b442134a80a495384b6ee80975aa4666f099f47aecbb30f8fb08c3074d337a116c28a62985addd9bcd06106a82d5039af0d9c2c29cb514058cbe56841182ab10d388f2dc622590df7047e36ca3bdacdfc4bd", 0x7d}, {&(0x7f0000001580)="e7daecd8a94ca0c1ab215837d29da4e3ba344763940e59a15f3f25bfdd8dae59ddcffdd75cfcd32cb60a494f0a9acc802609f1bcd0b16a05b7ca67f446f6381ce11357e94f6870bc4dece639e5848809d57c244fd5e3968c3f40918394355d9b756bcee3fea59a0dd73bb90cf5f0a206056964cc0f4eca16095133aed7cb7155870d7330441cb596f6cd62c07f3de0f65ee20aceefd11a1019622aeac4d83afb5c06ceafa3f99cb1939944b4c8818837914c17044fa5", 0xb6}], 0xa, &(0x7f00000017c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @rand_addr=0x1, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@cipso={0x86, 0x15, 0x80000000, [{0x2, 0x5, "d0f641"}, {0x2, 0xa, "c463988d47bb2906"}]}, @end, @cipso={0x86, 0x23, 0x6, [{0x0, 0x10, "439d4b76c80fabb12fbb76e03be5"}, {0x6, 0xb, "cfe5aa95320c8c75e6"}, {0x5, 0x2}]}, @timestamp={0x44, 0x44, 0xd4, 0x1, 0x9, [{[@dev={0xac, 0x14, 0x14, 0x2b}], 0x10001}, {[], 0x2}, {[], 0x81}, {[@loopback], 0xffffffaa}, {[@rand_addr=0x4], 0x8}, {[@initdev={0xac, 0x1e, 0x1, 0x0}], 0xff}, {[@multicast1], 0x3}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x6}, {[@multicast2], 0x5}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x100}}, {{&(0x7f00000018c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000001900)="1b90a6d98d9d572beb5c6208a2e52eb7cfc5cc843ffeb22d49cb34f07aef37348539697e45e0276b46eaf9522057a9e75e6035fd3644ec9dce", 0x39}, {&(0x7f0000001940)="7e79c12eb97108d507f40c1dbeba512cb3ff97cb59246dc6a29873e6599c08a35fe897f64681288911cad4c6d54304995db8f4879b67ec42ff870efa767a547bb0b971a74cf0b28c2ac45b761eaee618f25ae59255683606f04944069e433060d78cc97eb40f0a2dc78bb4926f0d41a9bf59ffa84e4e0f6b1e20a14b379010b26ae7ea54a907f54851b630e724d5cb9b28d89bee66f34553cc527214959c4793a45c48577e468b34eb8246034710fc4680a68ff3bf74d67fb5952f15484fbc15c30316d0bfebdac4765382912ad8982c4d6f5e501e7c054dc05d53024e11bb1ee9e0", 0xe2}], 0x2, &(0x7f0000001a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @multicast1, @local}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x1, 0x11, "672d7bccda68b5c110c0cb22306549"}, @generic={0x89, 0x8, "17ff8bbac7aa"}, @noop, @noop, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x80}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001b40)="b13fbbe07f66bb414be8e3373df9ba8c99cfcc7b73433c58792be343e6cb426becd032547c6fb80404d405a46ee18a5339610d3dc665eee5ffa9b42a767fe621ab80affde45faff32a8df1461ccd9b7c6f010db2ac0171d3347d2c120272cf9588c0b6ca109ec8120ab08e1094fd6a845a8456317d415cf94ef591c0af2a9bcc4d2ef163de4ac77c70b17812a7397d424128c8ece2cb7919b1ee5e16c92489ca585b576523c2bd646804aa6c0a392093fff3c281a8579f69ce269ded386fcdde37b66c9b58b17d0725b3b5f02ac3cd2121f310b732a60b9703fe11277c50b254f1e7c88f6e66c7f5f605", 0xea}], 0x1, &(0x7f0000001c80)=[@ip_ttl={{0x14}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ra={0x94, 0x6}, @end, @lsrr={0x83, 0x23, 0x3, [@rand_addr=0x7, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @remote, @local, @loopback]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xea1}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x15, 0x2, 0x8, [{[@empty], 0x7}, {[@multicast1]}, {[@loopback], 0x20}, {[], 0x6}, {[@dev={0xac, 0x14, 0x14, 0x10}]}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @generic={0x1, 0x2}, @cipso={0x86, 0x3a, 0x0, [{0x1, 0x8, "46fa44a9fcc5"}, {0x6, 0x10, "1be422966eb9b29c2b665b6c1a1a"}, {0x5, 0x6, "255ee45f"}, {0x5, 0x9, "6d86f32e4fba7e"}, {0x5, 0x6, "57c16978"}, {0x2, 0x7, "5bf6a1ca83"}]}, @noop, @timestamp={0x44, 0x14, 0x2, 0x0, 0x7, [{[], 0x50d66540}, {[@local], 0x401}, {[], 0x1}]}, @end, @rr={0x7, 0x17, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @multicast2, @broadcast]}, @rr={0x7, 0x17, 0x1, [@loopback, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0xf, 0x7, [@loopback, @empty, @local]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x190}}], 0x6, 0x10) 15:38:57 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/204, 0xcc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000040)={0x9, 0x8, [0x0, 0x7]}) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RREADDIR(r2, &(0x7f00000001c0)={0x87, 0x29, 0x1, {0x401, [{{0x22, 0x2, 0x1}, 0x8b3, 0x38, 0x7, './file0'}, {{0x8, 0x1, 0x3}, 0x8, 0x0, 0x7, './file0'}, {{0x2c, 0x4, 0x5}, 0x10000, 0x8, 0x7, './file0'}, {{0x80, 0x3}, 0x8, 0xdd, 0x7, './file0'}]}}, 0x87) r3 = socket$pppoe(0x18, 0x1, 0x0) close(r3) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000380)="3c0cf44133e37aa64a09fa274595a9cbdfd197e4ae7c3d1bc5500bbdd7bc0d838a959a9fb269bfeb4f41f2920e2f361e44cb3e88873900165d94727cc0a51163b6db12f4363224c18cb42da46d36893b7c0ffbf09ff557fb94cbac0eae103095d8ef31dc9356c2cec026b17b42cce442bdff25de34d9a6d931d952bfa2218e451fdd2ab03df2b572791bc541ca88acca3199a0c0fff08f0743a368eaa6b13784402507320fc36297edc94e2df4e15725c785d9cc9210ae4a0bc7c0bf79faf3defd64586fe350a91a5c", 0xc9}], 0x1, 0x2) [ 1163.864187] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1163.887264] FAULT_INJECTION: forcing a failure. [ 1163.887264] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.913033] CPU: 0 PID: 5166 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1163.921198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1163.921204] Call Trace: [ 1163.921225] dump_stack+0x142/0x197 [ 1163.921245] should_fail.cold+0x10f/0x159 [ 1163.921258] ? trace_hardirqs_on+0xd/0x10 [ 1163.921275] should_failslab+0xdb/0x130 [ 1163.921285] kmem_cache_alloc_node+0x56/0x780 [ 1163.921294] ? __lock_acquire+0x5f7/0x4620 [ 1163.921305] ? netlbl_enabled+0x9/0x60 [ 1163.921315] ? selinux_peerlbl_enabled+0xa2/0xd0 [ 1163.921331] __alloc_skb+0x9c/0x500 [ 1163.921343] ? skb_trim+0x180/0x180 [ 1163.921362] ip_do_fragment+0x964/0x2170 [ 1163.921371] ? mark_held_locks+0xb1/0x100 [ 1163.921381] ? ip_copy_metadata+0x9b0/0x9b0 [ 1163.921401] ip_fragment.constprop.0+0x148/0x200 [ 1163.921414] ip_finish_output+0x7bd/0xc60 [ 1163.937677] ip_mc_output+0x24a/0xd40 [ 1163.937694] ? ip_queue_xmit+0x1b10/0x1b10 [ 1163.937703] ? __ip_make_skb+0xdd7/0x16c0 15:38:58 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/\xe6\xb9v/vc\x01a#\x00', 0xffffbfff80000000, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfd945f90ff7dce2f}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="040029bd7000fbdbdf251100000008000600020000002800020014000100ffffffff0000000000000000000000000800070008000000080006000900000008000400ffffffff1c0003000800030004000000080001000100000008000100000000000800040003000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000c}, 0x40080) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) [ 1163.937717] ? rcu_read_lock_sched_held+0x110/0x130 [ 1163.937731] ? ip_fragment.constprop.0+0x200/0x200 [ 1163.937740] ? __ip_make_skb+0xe49/0x16c0 [ 1163.937754] ip_local_out+0x97/0x170 [ 1163.946234] ip_send_skb+0x3e/0xc0 [ 1163.955101] ip_push_pending_frames+0x64/0x80 [ 1163.955115] raw_sendmsg+0x1930/0x2450 [ 1163.955137] ? dst_output+0x140/0x140 [ 1163.955149] ? avc_has_perm_noaudit+0x420/0x420 [ 1163.955167] ? process_measurement+0x58a/0xb80 [ 1163.955179] ? process_measurement+0x58a/0xb80 [ 1163.963561] ? sock_has_perm+0x1ed/0x280 [ 1163.963579] ? save_trace+0x290/0x290 [ 1163.963595] ? __lock_is_held+0xb6/0x140 [ 1163.963611] inet_sendmsg+0x122/0x500 [ 1163.963622] ? inet_recvmsg+0x500/0x500 [ 1163.963636] sock_sendmsg+0xce/0x110 [ 1163.963650] kernel_sendmsg+0x44/0x50 [ 1163.963663] sock_no_sendpage+0x107/0x130 [ 1163.963673] ? sock_kzfree_s+0x50/0x50 [ 1163.963696] inet_sendpage+0x3b8/0x580 [ 1163.963711] kernel_sendpage+0x92/0xf0 [ 1163.963718] ? inet_sendmsg+0x500/0x500 15:38:58 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x385}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x10, @time={0x0, 0x1c9c380}, 0xe5, {0x0, 0x7f}, 0xc1, 0x0, 0x7f}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x8) [ 1163.963730] sock_sendpage+0x8b/0xc0 [ 1163.975876] ? kernel_sendpage+0xf0/0xf0 [ 1163.975890] pipe_to_sendpage+0x242/0x340 [ 1163.975905] ? direct_splice_actor+0x190/0x190 [ 1163.975923] __splice_from_pipe+0x348/0x780 [ 1163.975940] ? direct_splice_actor+0x190/0x190 [ 1163.975955] ? direct_splice_actor+0x190/0x190 [ 1163.984166] splice_from_pipe+0xf0/0x150 [ 1163.984182] ? splice_shrink_spd+0xb0/0xb0 [ 1163.984203] ? security_file_permission+0x89/0x1f0 [ 1163.984218] generic_splice_sendpage+0x3c/0x50 [ 1163.984229] ? splice_from_pipe+0x150/0x150 [ 1163.984238] SyS_splice+0xd92/0x1430 [ 1163.984250] ? __sb_end_write+0xc1/0x100 [ 1163.993335] ? compat_SyS_vmsplice+0x250/0x250 [ 1163.993346] ? do_syscall_64+0x53/0x640 [ 1163.993359] ? compat_SyS_vmsplice+0x250/0x250 [ 1163.993372] do_syscall_64+0x1e8/0x640 [ 1163.993383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1163.993402] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1163.993409] RIP: 0033:0x45a919 15:38:58 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x1, 0x5, 0xdd31, 0x2, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r1, 0x4871eb0e}, &(0x7f0000000280)=0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r2, 0x0, 0x11, &(0x7f0000000300)='/dev/qat_adf_ctl\x00'}, 0x30) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) splice(r3, &(0x7f0000000380)=0x3f, r4, &(0x7f00000003c0)=0x9e, 0x200, 0x1) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)={0x9, 0xfffffff9, 0x8, 0x6, 0x9}) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000002c0)=""/27, &(0x7f0000000080)=0x1b) [ 1163.993414] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1163.993425] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1163.993430] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1163.993436] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1163.993441] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1163.993447] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 15:38:58 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x204143, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000040)={0x0, 0x6}) 15:38:58 executing program 2: syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/151, 0x97}], 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0xfffffffe) 15:38:58 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 15:38:58 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/224, 0xe0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000300)={0x18, 0x0, {0xffffffffffffffff, @local, 'veth1\x00'}}, 0x1e) r1 = dup(r0) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffff5, 0x4}, 0x10) 15:38:58 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) dup2(r1, r0) syslog(0x3, &(0x7f00000000c0)=""/210, 0xd2) 15:38:58 executing program 4 (fault-call:10 fault-nth:13): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) dup(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c8, 0x298, 0x1e8, 0x130, 0x1e8, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'bpq0\x00', 'erspan0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'gre0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 15:38:58 executing program 3: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) [ 1164.666276] xt_CONNSECMARK: target only valid in the 'mangle' or 'security' tables, not 'raw'. [ 1164.711277] FAULT_INJECTION: forcing a failure. [ 1164.711277] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.723938] CPU: 1 PID: 5215 Comm: syz-executor.4 Not tainted 4.14.159-syzkaller #0 [ 1164.732999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1164.742431] Call Trace: [ 1164.745090] dump_stack+0x142/0x197 [ 1164.748775] should_fail.cold+0x10f/0x159 [ 1164.753034] should_failslab+0xdb/0x130 [ 1164.757016] kmem_cache_alloc_node+0x56/0x780 [ 1164.761585] ? __local_bh_enable_ip+0x99/0x1a0 [ 1164.766185] ? ip_finish_output2+0x7b3/0x14a0 [ 1164.770688] __alloc_skb+0x9c/0x500 [ 1164.774326] ? skb_trim+0x180/0x180 [ 1164.778119] ip_do_fragment+0x964/0x2170 [ 1164.782183] ? mark_held_locks+0xb1/0x100 [ 1164.786617] ? ip_copy_metadata+0x9b0/0x9b0 [ 1164.791119] ip_fragment.constprop.0+0x148/0x200 [ 1164.795880] ip_finish_output+0x7bd/0xc60 [ 1164.800172] ip_mc_output+0x24a/0xd40 [ 1164.804083] ? ip_queue_xmit+0x1b10/0x1b10 [ 1164.808319] ? __ip_make_skb+0xdd7/0x16c0 [ 1164.813475] ? rcu_read_lock_sched_held+0x110/0x130 [ 1164.818512] ? ip_fragment.constprop.0+0x200/0x200 [ 1164.823610] ? __ip_make_skb+0xe49/0x16c0 [ 1164.827823] ip_local_out+0x97/0x170 [ 1164.831591] ip_send_skb+0x3e/0xc0 [ 1164.835257] ip_push_pending_frames+0x64/0x80 [ 1164.839812] raw_sendmsg+0x1930/0x2450 [ 1164.843726] ? dst_output+0x140/0x140 [ 1164.847526] ? avc_has_perm_noaudit+0x420/0x420 [ 1164.852366] ? process_measurement+0x58a/0xb80 [ 1164.856952] ? process_measurement+0x58a/0xb80 [ 1164.861554] ? sock_has_perm+0x1ed/0x280 [ 1164.866853] ? save_trace+0x290/0x290 [ 1164.870679] ? __lock_is_held+0xb6/0x140 [ 1164.874751] inet_sendmsg+0x122/0x500 [ 1164.878663] ? inet_recvmsg+0x500/0x500 [ 1164.882658] sock_sendmsg+0xce/0x110 [ 1164.886465] kernel_sendmsg+0x44/0x50 [ 1164.890444] sock_no_sendpage+0x107/0x130 [ 1164.894760] ? sock_kzfree_s+0x50/0x50 [ 1164.898668] inet_sendpage+0x3b8/0x580 [ 1164.902810] kernel_sendpage+0x92/0xf0 [ 1164.906702] ? inet_sendmsg+0x500/0x500 [ 1164.910808] sock_sendpage+0x8b/0xc0 [ 1164.914540] ? kernel_sendpage+0xf0/0xf0 [ 1164.918624] pipe_to_sendpage+0x242/0x340 [ 1164.923095] ? direct_splice_actor+0x190/0x190 [ 1164.927801] __splice_from_pipe+0x348/0x780 [ 1164.932326] ? direct_splice_actor+0x190/0x190 [ 1164.936913] ? direct_splice_actor+0x190/0x190 [ 1164.941500] splice_from_pipe+0xf0/0x150 [ 1164.945564] ? splice_shrink_spd+0xb0/0xb0 [ 1164.949988] ? security_file_permission+0x89/0x1f0 [ 1164.954945] generic_splice_sendpage+0x3c/0x50 [ 1164.959802] ? splice_from_pipe+0x150/0x150 [ 1164.964273] SyS_splice+0xd92/0x1430 [ 1164.968257] ? __sb_end_write+0xc1/0x100 [ 1164.972474] ? compat_SyS_vmsplice+0x250/0x250 [ 1164.977215] ? do_syscall_64+0x53/0x640 [ 1164.981368] ? compat_SyS_vmsplice+0x250/0x250 [ 1164.986196] do_syscall_64+0x1e8/0x640 [ 1164.990102] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1164.995116] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1165.000319] RIP: 0033:0x45a919 [ 1165.003509] RSP: 002b:00007fcbe6315c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1165.011437] RAX: ffffffffffffffda RBX: 00007fcbe6315c90 RCX: 000000000045a919 [ 1165.019061] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1165.026769] RBP: 000000000075bfc8 R08: 0000000000019404 R09: 0000000000000000 [ 1165.034069] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcbe63166d4 [ 1165.041403] R13: 00000000004cb45b R14: 00000000004e3ef0 R15: 0000000000000007 [ 1167.750285] net_ratelimit: 20 callbacks suppressed [ 1167.750291] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.760440] protocol 88fb is buggy, dev hsr_slave_1 [ 1167.830263] protocol 88fb is buggy, dev hsr_slave_0 [ 1167.835485] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.150264] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.155369] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.230199] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.235296] protocol 88fb is buggy, dev hsr_slave_1 [ 1168.240455] protocol 88fb is buggy, dev hsr_slave_0 [ 1168.245606] protocol 88fb is buggy, dev hsr_slave_1 [ 1173.990187] net_ratelimit: 20 callbacks suppressed [ 1173.995190] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.000268] protocol 88fb is buggy, dev hsr_slave_1 [ 1174.070243] protocol 88fb is buggy, dev hsr_slave_0 [ 1174.075532] protocol 88fb is buggy, dev hsr_slave_1