Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. 2020/07/18 05:25:13 fuzzer started 2020/07/18 05:25:13 dialing manager at 10.128.0.26:33695 2020/07/18 05:25:14 syscalls: 3087 2020/07/18 05:25:14 code coverage: enabled 2020/07/18 05:25:14 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2020/07/18 05:25:14 extra coverage: enabled 2020/07/18 05:25:14 setuid sandbox: enabled 2020/07/18 05:25:14 namespace sandbox: enabled 2020/07/18 05:25:14 Android sandbox: enabled 2020/07/18 05:25:14 fault injection: enabled 2020/07/18 05:25:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/07/18 05:25:14 net packet injection: enabled 2020/07/18 05:25:14 net device setup: enabled 2020/07/18 05:25:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/07/18 05:25:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/07/18 05:25:14 USB emulation: /dev/raw-gadget does not exist 05:27:39 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0xffe5, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xd, "14ae4701cccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) [ 277.222914][ T32] audit: type=1400 audit(1595050059.937:8): avc: denied { execmem } for pid=8465 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 277.542199][ T8466] IPVS: ftp: loaded support on port[0] = 21 [ 277.776628][ T8466] chnl_net:caif_netlink_parms(): no params data found [ 278.097458][ T8466] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.105174][ T8466] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.114681][ T8466] device bridge_slave_0 entered promiscuous mode [ 278.126514][ T8466] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.133862][ T8466] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.143740][ T8466] device bridge_slave_1 entered promiscuous mode [ 278.195637][ T8466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.211222][ T8466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.263390][ T8466] team0: Port device team_slave_0 added [ 278.274814][ T8466] team0: Port device team_slave_1 added [ 278.325140][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.332224][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.359312][ T8466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.375383][ T8466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.382666][ T8466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.408763][ T8466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.580397][ T8466] device hsr_slave_0 entered promiscuous mode [ 278.733897][ T8466] device hsr_slave_1 entered promiscuous mode [ 279.173379][ T8466] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.243323][ T8466] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.320122][ T8466] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.360207][ T8466] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.643766][ T8466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.683238][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.692841][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.720829][ T8466] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.748626][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.758111][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.767734][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.775066][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.813308][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 279.822070][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.831887][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.841386][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.848765][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.859001][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.869757][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.916749][ T8466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.927491][ T8466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.955471][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.965831][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.976284][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.987145][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.996723][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.006211][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.016497][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.026079][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.079885][ T8466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.125120][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.135291][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.144256][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.152145][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.181949][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.191934][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.221723][ T8466] device veth0_vlan entered promiscuous mode [ 280.250699][ T8466] device veth1_vlan entered promiscuous mode [ 280.258929][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.268956][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.279404][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.324671][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.333753][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.343056][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.364484][ T8466] device veth0_macvtap entered promiscuous mode [ 280.383062][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.392961][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.411686][ T8466] device veth1_macvtap entered promiscuous mode [ 280.424455][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.434072][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.477770][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.485762][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.495805][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.530532][ T8466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.553692][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.563616][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:27:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xce, 0x0, &(0x7f0000000100)) 05:27:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000ff030000000000f50000", @ANYRES32=r4, @ANYBLOB="00000800ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0x0, 0x8}}}, 0x24}}, 0x0) [ 281.282720][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.300222][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:44 executing program 0: r0 = timerfd_create(0x9, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{r1}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, 0x0) r2 = timerfd_create(0x9, 0x0) clock_gettime(0x4, &(0x7f0000000040)={0x0}) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{r3}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, &(0x7f0000000180)) 05:27:44 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = fanotify_init(0x0, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) fanotify_mark(r2, 0x51, 0x8000038, r4, 0x0) fanotify_mark(r2, 0x12, 0x2a, r1, 0x0) 05:27:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d1b) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 282.041447][ T8708] blk_update_request: I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 05:27:44 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d1b) ioctl$LOOP_CLR_FD(r0, 0x4c01) 05:27:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d1b) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 282.899206][ T8723] blk_update_request: I/O error, dev loop3, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 05:27:45 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x3, 0x103382) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000000)='B', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002d1b) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 283.187488][ T2962] blk_update_request: I/O error, dev loop3, sector 384 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.198961][ T2962] Buffer I/O error on dev loop3, logical block 48, lost async page write [ 283.207707][ T2962] blk_update_request: I/O error, dev loop3, sector 392 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.219222][ T2962] Buffer I/O error on dev loop3, logical block 49, lost async page write [ 283.228000][ T2962] blk_update_request: I/O error, dev loop3, sector 400 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.239573][ T2962] Buffer I/O error on dev loop3, logical block 50, lost async page write [ 283.248287][ T2962] blk_update_request: I/O error, dev loop3, sector 408 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.259777][ T2962] Buffer I/O error on dev loop3, logical block 51, lost async page write [ 283.268565][ T2962] blk_update_request: I/O error, dev loop3, sector 416 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.280175][ T2962] Buffer I/O error on dev loop3, logical block 52, lost async page write [ 283.289001][ T2962] blk_update_request: I/O error, dev loop3, sector 424 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.300491][ T2962] Buffer I/O error on dev loop3, logical block 53, lost async page write [ 283.309212][ T2962] blk_update_request: I/O error, dev loop3, sector 432 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.320712][ T2962] Buffer I/O error on dev loop3, logical block 54, lost async page write [ 283.329464][ T2962] blk_update_request: I/O error, dev loop3, sector 440 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 283.340997][ T2962] Buffer I/O error on dev loop3, logical block 55, lost async page write [ 283.349704][ T2962] Buffer I/O error on dev loop3, logical block 56, lost async page write [ 283.358421][ T2962] Buffer I/O error on dev loop3, logical block 57, lost async page write 05:27:46 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket(0x10, 0x80002, 0x0) pipe(&(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) r2 = semget$private(0x0, 0x0, 0x0) shmctl$IPC_RMID(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d412dea281", @ANYRES32=0x0, @ANYBLOB="7f210102810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d35b4f003e00b0b9cad4a128"], 0x50}}, 0x20000044) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x0, 0x800) [ 283.663440][ T32] audit: type=1400 audit(1595050066.388:9): avc: denied { create } for pid=8736 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 05:27:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="af9a974cb7e1"}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010110108000000000000000000000020", @ANYRES32=r3, @ANYBLOB="000000004100000014001680100001800c00070000000000000000000400140001fb3020dd16ec0f47dfab790dfaad567ad9434658f870f4060c1feb7dc18a0bc01184eb2e11742947c5c443751391144254c79879cbae6bafce14d2010000000000000002505d66b401881f806ea426a28cbaf1d24259e655b5cb8edd34241cbc4f3d3521ae783b3688522bd2f51954a7b403f3e9b9c4064c7d8d5ea533c169e9c82863a661c8fdb91e6aedf9e465ad668e97591ad2f49d08017ef9f1e5ca691d17f0490e543f91f8ea53a683bf8eafd8f870c845268177547ad9c07f8e04d0ab570c1cf69318c21287cf14eb9a73f98109561ee56426ac3882534ea38bad993647fa84e5b77ec5d7c24665d8da74cd99834ec9de8c0355c9ebe52c4b714a55191fce44747225c65e9e7df64bbe7509cb67c26254d73095d8184e2da8833cbf92b7fd75c997a011d75eee183f9796cd2d86e83d0310adf4cba70454325a223571915378ed8998a469483b4db7836be2a8ba1dc6382b3ec713c86de9a7245bece09991c065af8d6371b9a8c3e356a50f5c6236e98f2104b8ce1af0d93d560a99"], 0x38}}, 0x0) [ 283.865597][ T8741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4368 sclass=netlink_route_socket pid=8741 comm=syz-executor.0 05:27:46 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000148a00000500e3cbae74000008001b0000000000a9b779aa4dbe35e3b42b787d"], 0x30}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f0000000440)=[{r2, 0x2002}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000001c0)={0x3ff, 0x200}, 0xc) setuid(r5) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x2, 0x4, 0x0, @remote, @mcast1, 0x700, 0x10, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r6, 0x4, 0x7f, 0x7, 0x80000001, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast2}, 0x80, 0x10, 0xc3bc, 0x5}}) prctl$PR_CAPBSET_READ(0x17, 0x24) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0xffffffffa0008000}, 0x0) openat$vhci(0xffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r8 = dup3(r7, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000140)={0x1f, 0xe0, 0x1f}) [ 284.131586][ C1] hrtimer: interrupt took 97920 ns [ 284.198803][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.255096][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.264299][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:27:47 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0xea59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000148a00000500e3cbae74000008001b0000000000a9b779aa4dbe35e3b42b787d"], 0x30}}, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f0000000440)=[{r2, 0x2002}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000001c0)={0x3ff, 0x200}, 0xc) setuid(r5) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x2, 0x4, 0x0, @remote, @mcast1, 0x700, 0x10, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'ip6_vti0\x00', r6, 0x4, 0x7f, 0x7, 0x80000001, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @multicast2}, 0x80, 0x10, 0xc3bc, 0x5}}) prctl$PR_CAPBSET_READ(0x17, 0x24) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @mcast2}]}, 0x30}, 0x1, 0xffffffffa0008000}, 0x0) openat$vhci(0xffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0) r8 = dup3(r7, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000140)={0x1f, 0xe0, 0x1f}) [ 284.821386][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 284.869090][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 284.877875][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:27:47 executing program 1: r0 = openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000040)) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000000c0)) r1 = openat$null(0xffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x500000, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000140)={0xa, 0x4}, 0xc) r2 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x400, 0x7b25014c9183c8ba) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f00000001c0)={0x0, 0x0, @ioapic}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000400)={0x3}, 0x4) prctl$PR_SVE_SET_VL(0x32, 0x17275) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000004c0)={0xa10000, 0x20, 0x1, r1, 0x0, &(0x7f0000000480)={0x400d8, 0x6, [], @p_u16=&(0x7f0000000440)=0x8}}) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000500)={0x3, {0x1, 0x401, 0x6, 0x1}}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f00000005c0)={0x0, 0x7, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x9a0001, 0x1, [], @p_u32=&(0x7f0000000540)}}) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2100, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r4, &(0x7f0000000600)='security.capability\x00', &(0x7f0000000780)=@v3={0x3000000, [{0x3bf3, 0x4}, {0x262d, 0x1}], r5}, 0x18, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000840)={0x4, 0x4, 0x152, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x990af9, 0x40b, [], @p_u32=&(0x7f00000007c0)=0x9646}}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000880)=[0x1, 0x3], 0x2) openat$kvm(0xffffff9c, &(0x7f00000008c0)='/dev/kvm\x00', 0xa0280, 0x0) r7 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000900)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8983, &(0x7f0000000940)={0x3, 'macvtap0\x00', {0x100}, 0x5}) [ 285.154627][ T32] audit: type=1400 audit(1595050067.878:10): avc: denied { execmem } for pid=8754 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 285.506967][ T8755] IPVS: ftp: loaded support on port[0] = 21 05:27:48 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x24, 0x29, 0x5, {0x0, 0x2, 0x2, 0x10001, 0x0, [@dev={0xfe, 0x80, [], 0x36}]}}}], 0x24}, 0x0) 05:27:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) clone3(&(0x7f0000001680)={0x80000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) [ 285.868345][ T8755] chnl_net:caif_netlink_parms(): no params data found 05:27:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="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", 0xfc) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000100)=0x80000001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 286.232856][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.240084][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.243013][ T8889] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 286.249248][ T8755] device bridge_slave_0 entered promiscuous mode [ 286.262665][ T8889] netlink: 'syz-executor.0': attribute type 3 has an invalid length. 05:27:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x8302) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="c8c1486d8e903e47c7d7494977a60d4d75f7defc3d4fea148ad553a6d7f2ebfa6b0be36cc0f124ee86d2004b1436a40b2743a605e564fb2df467c081d920a77ff5a5df7bc6efde630a84dc975a1e710173bf7e52f277523cd734e05b3f9973bcce6219b7ec9e4e63a2319d36652c86d891461b4c", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES32], 0x0) [ 286.348162][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.355497][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.365233][ T8755] device bridge_slave_1 entered promiscuous mode [ 286.515511][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.551948][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.629624][ T8755] team0: Port device team_slave_0 added [ 286.640627][ T8755] team0: Port device team_slave_1 added [ 286.681897][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.688955][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.715043][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.728550][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.735817][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.762587][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 05:27:49 executing program 0: syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='commit=0x']) r0 = msgget$private(0x0, 0x2) msgsnd(r0, &(0x7f0000000180)={0x2, "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"}, 0x1004, 0x800) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f00000011c0)='./file0\x00', 0x9, 0x1, &(0x7f0000001240)=[{&(0x7f0000001200)="32d33b", 0x3, 0x7fff}], 0x3, &(0x7f0000001280)='%}\xe5[!^:\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000040)={0x1, 0x8}, 0x2) [ 286.871966][ T8755] device hsr_slave_0 entered promiscuous mode [ 286.912798][ T8755] device hsr_slave_1 entered promiscuous mode [ 286.942286][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.950002][ T8755] Cannot create hsr debugfs directory [ 287.028270][ T8941] gfs2: Bad value for 'commit' [ 287.107528][ T8941] ceph: No path or : separator in source 05:27:50 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0x2, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x2, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, [], 0x1}, 0x80000000}}}, 0xa0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='t\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000040000000900010072"], 0x74}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r7 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) signalfd4(r3, &(0x7f0000000100)={[0x10001, 0x8]}, 0x8, 0x0) sendfile(r6, r6, 0x0, 0x24000000) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000080)={0x20000000}) sendmmsg$alg(r0, &(0x7f0000000200), 0x0, 0x0) [ 287.475967][ T8755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.552030][ T8755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.634219][ T8755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.708432][ T8755] netdevsim netdevsim1 netdevsim3: renamed from eth3 05:27:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="48b900adec9ba5fbfae19d07c51c", @ANYRES16=r1, @ANYBLOB="1100000000000000000002000000340001800d0001007500269300000000400001007564703a73797a31ff0000007c9eb3ec17fb8c222f5bae1817106c1a55fc627d7ae75059cc62d2db42c8b3254206fdffffffffffffff777799466d0b0676bc5f3c2a8e41414df311115289b322712f00"/125], 0x48}}, 0x8010) socket$inet_smc(0x2b, 0x1, 0x0) [ 288.169946][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.213982][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.222870][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.258527][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.284032][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.293830][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 05:27:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffc0, 0x4201) r1 = socket$alg(0x26, 0x5, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) [ 288.303169][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.310364][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.382263][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 288.391699][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.401721][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.410846][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.418134][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.427261][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.437978][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.448729][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.458869][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.512268][ T8755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.522939][ T8755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.587045][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.624079][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.634145][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.644465][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.654750][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.664253][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.674325][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 05:27:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x5}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, r4, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, "0020ec1b94dc5b4f3ee83ea2a29ef7af10083f5465cd9670f1e4d1a33e5a767de1743df572da"}]}, 0x40}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r8, 0x28, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000280)={0x8, r9}, 0x8) r10 = dup(r6) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x271c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2218, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x49, 0x3, "c5de44fb2deecad2411098ada9ed5e9b7606ebe1305aa752ecec357c9cd645acbdd3f9cd96add85c4d330c7e93317ce08c9ba17e30ddb46ac53e21841f9b9df52d972f1e4f"}, @NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_6GHZ={0x30, 0x3, "06239f449729f9e40d40c5176b86ce94fc0712c5071aa2fcd92498d6637ac42e5776b199d059a782eb0bc9d4"}, @NL80211_BAND_60GHZ={0xed, 0x2, "cdba79a1ce97ec3122eafa1aa3e5586074afe19f3d211d3d38e9fc18757f0a64e8759d037c0bbc952f3755c4e71b0ccf9c9a7522317fe5ecdb6dac68133c4f08c0146bced807a8b934354cc8d436da103491df5e781e384c58bf1083d82df6ffc6245d7091504398ff375469eca68bad245b614561c646db5c59538ee430658d361ec95697aa071aabae71a736a52bd15e44484938523fddc76a78827b01540716d6f9a545f90c3ee0bad196335b879b8b2b4cc4f8addd0be0e774025a8bbf7ede830ba1e2a35a4282c92d1b79ec2e56ecd3eff7f8d41d2383b30d9d7621cedefbf6e6589c2051ac9a"}, @NL80211_BAND_5GHZ={0xa0, 0x1, "f0b061dedaa1191895a059150bc7136a48a5601300aa0d8465a1a58d9983ccb2441a74a19412a11ac35cfaadb9f42a4cedded49e17b7f02db1e81c57f0b470288c68c5cd61b134576856b59b068f90226a019d1479678acc94ab822fcb95a89c89d2e5c3284fc43b9099d9f906446ca3c1dfffce05b098b9db28cc6eb3c4a8c8325b263e62c05b19d2d8a3e9e29122b5d1f82d0a342bfaa0115aa787"}]}, @NL80211_ATTR_IE={0x4de, 0x2a, "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"}]}, 0x271c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) [ 288.683771][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.693230][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.701031][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.725192][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.745900][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.755956][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.863279][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.873666][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.905581][ T8755] device veth0_vlan entered promiscuous mode [ 288.915187][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.924085][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.954106][ T9002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.974972][ T8755] device veth1_vlan entered promiscuous mode [ 289.041658][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 289.050813][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 289.073760][ T9002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.121992][ T8755] device veth0_macvtap entered promiscuous mode [ 289.133091][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.142962][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.187170][ T8755] device veth1_macvtap entered promiscuous mode [ 289.207529][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 289.217158][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 05:27:52 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9307ac300080000d292a8fcd277cb57f5650731dfaf12ea77ad43cb08000000a9fdd6c1610c621c85fe3e3485460af173b9bede5105e65b5328de40c7a650beec67c6c88448db821ef57e8d4306f47f6ea4a6563c9a221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac8213ab718c023043c03a6fb4862e0353a7efd2f2d23d90b8411f34ce144800897c857c0272248f0604b910806046113de15a5841ba2c3f2c43994f587eb64d28c7eb86439403f05e008265c76ecbe764204fd8ab1a3954ece38f9fc57a77fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04"], 0x18}}, 0x0) pipe(0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x2, 0x4, "1245503614aa550e9b00306816295da03e21d7de17915b78"}, 0x28) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r4 = mq_open(&(0x7f0000000000)='\x02\x00\x00', 0x0, 0x0, 0x0) mq_getsetattr(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x50}}, 0x4000000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) close(r1) [ 289.273601][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 289.284411][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.297881][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.321859][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.332102][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.376666][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 289.387274][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.402827][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.413685][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.423776][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:27:53 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) pipe(0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x2, 0x4, "1245503614aa550e9b00306816295da03e21d7de17915b78"}, 0x28) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r4 = mq_open(&(0x7f0000000000)='\x02\x00\x00', 0x0, 0x0, 0x0) mq_getsetattr(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x50}}, 0x4000000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) close(r1) 05:27:54 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18}}, 0x0) pipe(0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x2, 0x4, "1245503614aa550e9b00306816295da03e21d7de17915b78"}, 0x28) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r4 = mq_open(&(0x7f0000000000)='\x02\x00\x00', 0x0, 0x0, 0x0) mq_getsetattr(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x50}}, 0x4000000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) close(r1) 05:27:54 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9307ac300080000d292a8fcd277cb57f5650731dfaf12ea77ad43cb08000000a9fdd6c1610c621c85fe3e3485460af173b9bede5105e65b5328de40c7a650beec67c6c88448db821ef57e8d4306f47f6ea4a6563c9a221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac8213ab718c023043c03a6fb4862e0353a7efd2f2d23d90b8411f34ce144800897c857c0272248f0604b910806046113de15a5841ba2c3f2c43994f587eb64d28c7eb86439403f05e008265c76ecbe764204fd8ab1a3954ece38f9fc57a77fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04"], 0x18}}, 0x0) pipe(0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x2, 0x4, "1245503614aa550e9b00306816295da03e21d7de17915b78"}, 0x28) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r4 = mq_open(&(0x7f0000000000)='\x02\x00\x00', 0x0, 0x0, 0x0) mq_getsetattr(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x50}}, 0x4000000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) close(r1) 05:27:55 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000230047faffffff00000000000400000204001000b115f8b9307ac300080000d292a8fcd277cb57f5650731dfaf12ea77ad43cb08000000a9fdd6c1610c621c85fe3e3485460af173b9bede5105e65b5328de40c7a650beec67c6c88448db821ef57e8d4306f47f6ea4a6563c9a221558fa14efaf3bbee029931fbc632ddc0548f9f44600ac8213ab718c023043c03a6fb4862e0353a7efd2f2d23d90b8411f34ce144800897c857c0272248f0604b910806046113de15a5841ba2c3f2c43994f587eb64d28c7eb86439403f05e008265c76ecbe764204fd8ab1a3954ece38f9fc57a77fda364a7b3de7d8c08a9dc0ca3931107160f2ab2188295f25a04"], 0x18}}, 0x0) pipe(0x0) write$nbd(r0, &(0x7f00000001c0)={0x67446698, 0x1, 0x2, 0x2, 0x4, "1245503614aa550e9b00306816295da03e21d7de17915b78"}, 0x28) openat$pfkey(0xffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev, 0xc}], 0x1c) r3 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000080)) r4 = mq_open(&(0x7f0000000000)='\x02\x00\x00', 0x0, 0x0, 0x0) mq_getsetattr(r4, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x50}}, 0x4000000) openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000100)) close(r1) 05:27:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x49, 0x49, 0x2, [@datasec={0x4, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x3b, 0xfffff6fc}, {0x3, 0x100, 0x9}, {0x5, 0x7c, 0x6}, {0x4, 0x6, 0x6}], "9a"}, @func_proto={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f00000002c0)=""/4096, 0x66, 0x1000, 0x1}, 0x20) 05:27:55 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000b40)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000b80)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000080)='/dev/radio#\x00', 0x1) r2 = dup(r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x8, 'dummy0\x00', {'batadv0\x00'}, 0x9}) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) openat$cgroup_freezer_state(r2, &(0x7f0000000180)='freezer.state\x00', 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0xb8000000, "58e83ab609325c22d5e51dd056d91d989f7dc5c69f5c0db280518ffb2f645a9a", 0x40, 0x10001, 0x0, 0x4, 0x2}) 05:27:56 executing program 1: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x200a400e) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000600), 0x1, {0xa, 0x4e25, 0x9, @private1, 0x6}, r1}}, 0x38) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r5, 0xc91add0bf88807dd, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x280, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x1}, {0xc}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x6}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x1ab}, {0xc, 0x90, 0x7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x7f}, {0xc, 0x90, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x1}, {0xc, 0x90, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xc00000000000000}, {0xc, 0x90, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x1ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x38}}]}, 0x280}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)) 05:27:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000fed000)={0x0, 0xe, &(0x7f0000000140)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, @map, @map, @ldst={0x3, 0x1, 0x1, 0x5, 0x1, 0x8, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x64f}, @alu={0x7, 0x1, 0x9, 0x8, 0x8, 0x8}, @generic={0x1, 0x8, 0x3, 0xe3be, 0x1f}]}, &(0x7f0000919ff6)='syzkaller\x00', 0x23, 0x9e, &(0x7f00000001c0)=""/239, 0x40f00, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 05:27:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102040bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x3c, r4, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf2514000000e6ca80903beccdf3f9755a17b27f684354bfe3e05928a93be3f7b2fc1cf2d987737c9b0516ef63f600b3df9f01562d2f9a2267230467553dbbe49dd0bb1ede4c71ab9728288c6fb3c6f902b909a296d65a222548c8b1e4883b28a75a519fdd03a65c5f18de2dd9731ec547963ec197611df19108a73cf6f5737158637861502d1c5dbe5c036c0e8b2bab01ebdb6265fade54ef31b85aa5d3a7b3bf"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x40800) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x6) ptrace$cont(0x18, r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, &(0x7f00000000c0)="207ef39c5f3eb0bda7a30086b6f95e9a80d17cdc83b77a8fafbabe2bfe12b33cda3cc0ff5c560ec27c70f6703395097009094409842daaeebb502e93dfd323e5f2261543e81f2b3bd49a662db4d7224bf2e3460f83db56199f631fe9dedce92453498db10c8ba1a8279297cf19fe6dd07f3e67cd7727fa9f0d9dcd27ddfff09679ec7f1faf578ef9397c18b7c91d3e876c1a9a52491a7b7b0be0864ff020"}, 0x40) syz_open_dev$ttys(0xc, 0x2, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 05:27:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffff4, 0x10, &(0x7f0000000000), 0x10}, 0x74) 05:27:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x5, 0x6, 0x101}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$zero(0xffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x600002, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) 05:27:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20040084, &(0x7f0000000e00)={0x2, 0x4e20}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x1, 'fo\x00', 0x7, 0x9, 0x63}, 0x2c) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="9b", 0x1}], 0x1}}], 0x1, 0x4000051) [ 294.526645][ T9187] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 294.579526][ T9189] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20003 [ 294.611338][ T9187] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20003 05:27:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0xffffffdd) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/nf_conntrack\x00') read$FUSE(r2, &(0x7f0000000800), 0x1000) read$FUSE(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0x8b, 0x1, &(0x7f0000000100)={r3, r4+60000000}, &(0x7f0000000180), 0x2) 05:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)) r3 = gettid() tkill(r3, 0x1004000000013) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/time\x00') r4 = dup(r0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000080)={0x1, @pix_mp={0xfe, 0xf64, 0x710f1d2a, 0x0, 0xc, [{0x1c0000, 0x2}, {0x9, 0x9}, {0x1, 0x9}, {0x5, 0x677c94dc}, {0xffffffff, 0xffff}, {0x27, 0xffffcb1f}, {0x1000, 0x3f}, {0x80000001, 0xff}], 0x5, 0x6, 0x4, 0x0, 0x5}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x30000000}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44814}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000000000000000400140600fe800000000000000000000000d49fbbfe8000006404000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0) 05:27:58 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x2, {0x7, 0x25, 0x0, 0x40c, 0x0, 0x0, 0x0, 0xfff}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000240)) 05:27:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x1fe, 0x4) r1 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x0, 0x0) faccessat2(r1, &(0x7f0000000040)='./file0\x00', 0x110, 0x200) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 05:27:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x44, r3, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f000000000}]}, 0x44}}, 0x80) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) unlink(&(0x7f0000000000)='./file0/../file0/file0/file0\x00') 05:27:59 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x10008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="78696e6f3d8966662c07006f74634ed06f6e746578743d726f6f742222"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x4000000, 0x3, 0x1b}) r3 = dup(r0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) listen(r0, 0x6) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000000000080020000000900000009000000ff09000000000000040000000000000000000000000000000d000000200d000001000000800000000100000000040000ff030000000000000f5fb097d5088b06000000c0080000000000000008000000c293d703b08500000200"/128]) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0xa269, 0x3, 0x2, 0x3}, 0x8) 05:28:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x28800, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000001c0)={0xa, @win={{0x1, 0x0, 0xfffffffb}, 0x7, 0x400, &(0x7f0000000140)={{0x4, 0x3, 0xdf3, 0x101}, &(0x7f0000000100)={{0x53b0000, 0x1, 0x10000, 0x80000001}}}, 0x9, &(0x7f0000000180)="86b919ea", 0xcc}}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x1, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) [ 297.263427][ T9220] overlayfs: unrecognized mount option "xino=‰ff" or missing value 05:28:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="dee7030022cf9e5e1dbac27b0426fc0299c40800000000000000c894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0x78, r1) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$search(0xa, r1, &(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca02}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 05:28:00 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) 05:28:00 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) [ 297.889100][ T9234] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:00 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) [ 297.985909][ T9239] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:00 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000040)={r4, 0x7}, 0x8) [ 298.079314][ T9242] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 298.175667][ T9246] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:01 executing program 2: ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000000)={0x0, 0x188e, {0xffffffffffffffff}, {0xee01}, 0x5, 0x1000}) ptrace$setregs(0xd, r0, 0xe109, &(0x7f0000000040)="503083c98fe2bd7ac0a74743a2348cf47ef92da919757cfacab8ab44128826e6d817738a6c68842a40ea5c8fb72973ea1bc25769fc188286f7c94ed42b6b10e988d73359c2922be2761a0a909884b9df3ebb44d313ac38b93ce13ebf84c1b24a9b0abc8f66b828f3d3e3f65f3246d02b57434f2a5eaae91d014cacf5abf0c95b43642d462e") ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000100)={0x3, 0x200, {r0}, {0xee00}, 0x3, 0x2}) tgkill(r0, r1, 0x28) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4800) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r3) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r4, 0xc04c561a, &(0x7f0000000200)={0x9f54, "dda13addc111bbdfa816ccf15eafe4069af75c578700cd5aa2f55d6f7061a924", 0x1, 0x3, 0x2, 0x3000000, 0x6020900, 0x8}) r5 = openat$nullb(0xffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x101040, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000002c0)=0x7) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000300)=0x2) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/229, 0xe5, 0x0, &(0x7f0000000440)) r6 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x7, 0x7ff, 0x28, @loopback, @private2={0xfc, 0x2, [], 0x1}, 0x1, 0x7800, 0x3, 0x100}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', r7, 0x2f, 0x0, 0x40, 0x6, 0x0, @empty, @mcast1, 0x40, 0x7800, 0x0, 0x400}}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000640)) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x400000, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x11}}]}]}, 0x38}}, 0x8cbfc9b7d162a607) 05:28:01 executing program 0: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x8c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x0, 0x0, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb}, 0x48) 05:28:01 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) [ 299.242383][ T9255] IPVS: ftp: loaded support on port[0] = 21 [ 299.290259][ T9257] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:02 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="4dab022c5bfcf7372836e886f84c176699668ae3ddc3537cbeda7b7129f6df15725a682204e6a31c41b80916181a52486c5a7144bdbc8bb650c508", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 05:28:02 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 299.453861][ T9280] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 299.648652][ T9287] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 299.881125][ T9255] chnl_net:caif_netlink_parms(): no params data found [ 300.194767][ T9255] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.202337][ T9255] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.211825][ T9255] device bridge_slave_0 entered promiscuous mode [ 300.291068][ T9255] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.298293][ T9255] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.307819][ T9255] device bridge_slave_1 entered promiscuous mode [ 300.416472][ T9255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.447114][ T9255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 05:28:03 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 300.543523][ T9255] team0: Port device team_slave_0 added [ 300.565907][ T9255] team0: Port device team_slave_1 added [ 300.663032][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.670957][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.697175][ T9255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.697449][ T9414] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:03 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) socket$inet6_sctp(0xa, 0x5, 0x84) [ 300.856046][ T9255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.863204][ T9255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.889374][ T9255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 05:28:03 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) socket$inet6_sctp(0xa, 0x5, 0x84) [ 300.963753][ T9420] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 301.136831][ T9255] device hsr_slave_0 entered promiscuous mode [ 301.156959][ T9432] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 301.197473][ T9255] device hsr_slave_1 entered promiscuous mode [ 301.239829][ T9255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.247541][ T9255] Cannot create hsr debugfs directory 05:28:04 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) socket$inet6_sctp(0xa, 0x5, 0x84) 05:28:04 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 301.840097][ T9255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.930247][ T9255] netdevsim netdevsim2 netdevsim1: renamed from eth1 05:28:04 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 301.997498][ T9255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.057218][ T9255] netdevsim netdevsim2 netdevsim3: renamed from eth3 05:28:05 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 302.537368][ T9255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.608321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.617362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.656849][ T9255] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.696847][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.707810][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.717198][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.724547][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.893222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.902624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.912364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.923416][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.930896][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.939981][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.950686][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.961334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.971449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.981572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.991811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.001915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.011228][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.020455][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.029913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.044151][ T9255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.053453][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.137509][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.148171][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.172730][ T9255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.223948][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.235432][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.284308][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.293933][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.314755][ T9255] device veth0_vlan entered promiscuous mode [ 303.338588][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.347404][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.361620][ T9255] device veth1_vlan entered promiscuous mode [ 303.425646][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.437748][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.447096][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.456855][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.476252][ T9255] device veth0_macvtap entered promiscuous mode [ 303.496769][ T9255] device veth1_macvtap entered promiscuous mode [ 303.533256][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.544198][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.554194][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 303.564797][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.578293][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.594140][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.603436][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.612929][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.622580][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.649767][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.660308][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.670309][ T9255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 303.681073][ T9255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.694393][ T9255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.708117][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.718032][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:28:07 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x78) socket$inet6_sctp(0xa, 0x5, 0x84) 05:28:07 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)={r1}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x2a, 0x1, 0x0, 0x0, {0x20000000004, 0xe00000000000000}, [@typed={0x7, 0x7b, 0x0, 0x0, @str='#{\x00'}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) sendmsg$nl_route(r2, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f00000002c0)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x1}, [@RTA_DST={0x8, 0x1, {0x3}}]}, 0x24}}, 0x4000004) [ 304.516739][ T9522] addrtype_mt_checkentry_v1: 4 callbacks suppressed [ 304.516770][ T9522] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:07 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::]:04:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x9fdfaeae551bfc06) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000100)='\x00', 0x1, 0x0) [ 304.670935][ T9530] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:07 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff}) poll(&(0x7f0000000140)=[{r0}], 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24000000) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x9, 0x80000000, 0x4}) [ 304.906557][ T2306] libceph: connect (1)[d::]:4 error -101 [ 304.912579][ T2306] libceph: mon0 (1)[d::]:4 connect error 05:28:08 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "008000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x11) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) dup3(r1, r0, 0x0) 05:28:08 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 305.533211][ T9546] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 305.660125][ T9535] ceph: No mds server is up or the cluster is laggy [ 305.695445][ T9553] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:08 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0xff9a, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd6064511000383a00fe8000000000000000000000000000aaff02000000000080000000000000000103009078000000006000000000003a00fc00000000000000000000000000000000000000000000000000000000000001050c68dee3b14aad64e8ad24c9a7bb54c9296ce38895a22ed9ee438b4a9cf6eee7c97727bf0fe497597dac1865cc6974e9ea0a45963854c517260189"], 0x0) r1 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c, 0x80000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000040)=0xdee2) [ 305.980527][ T9569] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:08 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:random_device_t:s0\x00', 0x65, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000300)=@v3, 0x18, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000580)={0x18}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendto$rxrpc(r4, &(0x7f0000000240)="6dba4c683eadea8471329b36068d4efe55d13ed5b82e607b69efe95c6b98d1ec8027dca79c45394001ef53445d89ab6ed3b14de2f412ae60f6b9fa9b578e111e5843b218dff08a5ca36d11d0fc0a3b34dd5e4223b06855c901963651301156adbba3b54b61f079a23edaf23fbe434da07f39ff65378f4da7e72a203359cf105f6f1c51caa80c1a47422dbb0a839de9417834d9812fb04f0199c6d0b11ba573dd8dcf49e5dc312cddd0831e0b", 0xac, 0x2000400, &(0x7f0000000340)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}, 0x24) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x3d, 0x80, 0x7}) 05:28:08 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040)="1ba0000016001d0d89fdc5cbdda3779399d8045798707bed4dca141a780f0f8e", 0x20, 0x40, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000000)=""/60, 0x3c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000140019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e22e, 0x0) [ 306.299491][ T32] audit: type=1400 audit(1595050089.021:11): avc: denied { relabelto } for pid=9579 comm="syz-executor.0" name="bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 306.419492][ T32] audit: type=1400 audit(1595050089.061:12): avc: denied { read write } for pid=9579 comm="syz-executor.0" name="bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 306.445266][ T32] audit: type=1400 audit(1595050089.061:13): avc: denied { open } for pid=9579 comm="syz-executor.0" path="/root/syzkaller-testdir243727775/syzkaller.DQOncQ/32/bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 306.473964][ T32] audit: type=1400 audit(1595050089.061:14): avc: denied { setattr } for pid=9579 comm="syz-executor.0" name="bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 05:28:09 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3c, @fixed={[], 0x11}, 0x7, 0x1}, 0xe) close(r0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 306.498074][ T32] audit: type=1400 audit(1595050089.091:15): avc: denied { relabelfrom } for pid=9579 comm="syz-executor.0" name="bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 306.522633][ T32] audit: type=1400 audit(1595050089.211:16): avc: denied { getattr } for pid=8466 comm="syz-executor.0" path="/root/syzkaller-testdir243727775/syzkaller.DQOncQ/32/bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 306.551374][ T32] audit: type=1400 audit(1595050089.211:17): avc: denied { unlink } for pid=8466 comm="syz-executor.0" name="bus" dev="sda1" ino=15769 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 05:28:09 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 306.840384][ T9593] IPVS: ftp: loaded support on port[0] = 21 [ 307.059642][ T9618] IPVS: ftp: loaded support on port[0] = 21 05:28:09 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 307.105134][ T9620] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 307.342172][ T9646] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r3, 0xc91add0bf88807dd, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x190, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x190}}, 0x0) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r4, 0xf502, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000020103000000000000000000e6ff0000080008"], 0x1c}}, 0x0) 05:28:10 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 307.450926][ T1478] tipc: TX() has been purged, node left! 05:28:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:11 executing program 2: socket$unix(0x1, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000074774277efbdc43ed475476160600fd5721540001a381", @ANYRES32=0x0, @ANYBLOB="7fff0002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005c0100000000000000008000a0009d45b"], 0x50}}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x24000000) r4 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x12100) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[r2, r4, r1]}, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 05:28:11 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 308.558419][ T9676] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 05:28:11 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) [ 309.281140][ T9696] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 309.349567][ T9700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.390885][ T9702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 05:28:12 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_ifreq(r0, 0x8950, &(0x7f0000000000)={'geneve0\x00', @ifru_addrs=@l2={0x1f, 0x6, @any, 0x3, 0x1}}) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = openat$zero(0xffffff9c, &(0x7f0000000a40)='/dev/zero\x00', 0x18b600, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000a80)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0xff, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x7}, 0x1c) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000480)="a9772d9bea4824cc3854a62ffb84c4fb114d80fe462fd727b6f682cf0f9ccfe45f46ed18fc8af0505df86b4230370bfac91f7266fae5859a3608357c69f51cfa473ef19a9dc2aeb43f9ed68acc034cf841229fbbe3f57130fe2ad707c56a92dbe64e59aa78e24db8e9b50597ab0024ca2564fbdb50e7b8cfa5c7028d556977ad6a90adf768a5ac0505ab07f8256368c6e71dd4b5a1c2e3c9946b610ab2b324099beb706b6a510c134ad18c928be3af6cf20e5016c9a050e35e30716e4913c882272bbfc8f0e1ee9c31484af6953e7d967640eff8accacee6daf3f98051a3ee281555a41340273dcb0bd8cc8cd549676f3ec23cbca42d4b76a178376eefb3da036d60cb88b5cb9c0ae0135be1d4f598c564fbe97ad4b691f59ba4063b898482d9cde4497009884d75b1965874e9c4d5a7cf8a640433c02acd340a98eff73e5948611184c7c60da3b233367d58aaf4e407e2e2c506b871fd822ec231389734d23a2aa5dc197831d8fee19361e5b99d0b51e5b1f0cadf296b91aa9477fa72879b4a3a3040777cf778cee1de32619701d71cb5316c7234a910b497b5f1b2cd2a0d39e92b6b92e091b470da2cec0e1b1fd3ce1a15d559b3733b97b2ddb1dd2aa73c9e03f189b8dd48c9093daddcd2c3fd0e1a9d16046d85c8934d2f9094aa5fa7b8ff061cb753dea2637ac2a8d523c9791ae454ea2e8cb10ce4a3ad8937ed583cd653bdb05b965e658f9c5f06a43bb1e61cfa4cb9be2cb4ef264d10f37e5292576bfdc97b2e1f8b692f0b64f76287e67805df914273677a9c39bd1e4f73d3c1afd99ad18a210caee42ab5c87969f6f99d7423dbb72d436ef3a3dead8eda03274d2e8e7f107eb04fdc3e36d6d4022dbc5c2fe388aaa3234950588ef56362708189826b98d3c9ed4dabcb33582a7e55327e82686aac973a5d0292afd7175a9c57b4fc1e5ba7cb0a34e35e50526d40bdb51a224e5b89e74e8752c1b39ab250b178adfab91c73c04d3c012b244cb7745dde4f716203ffcddaa096186ed0403b323c3aaa79aa4a0e6d1231ce99f83788ba0dc86da01cdad25816c26bf8e523b287d7ee83b5d0c55599ddbd202f743a1bc3d107a9c9610dc62537af48eecdd174ee4e796943250b81af0da28c57955aea149010ede13eb973dbe959500afe5e77b32ad5a11a353555b48eb7684596eadc481c291f185d0d47c639fa5bcb2dffe859a9d4a0e184a640e30f0afe83f2096faef9c0129289688a5267e0d2dadadd0f8cb13f35827f0337d2edf6220a244dd8c135563051f6fcd7fdad7879ff3ef01975938bc6e47aee745d4701cfc5e5546f05903bbcde0120ad847c32658c1384a6d8f188544df337a25f806051a346fb980a4e84fee06b0d367bc81161e96072b2e7e47999ac93437749d11864fa4c03a2d333135660aa17bd421623e6654eeae956e51a0157cb876db3e9cb324641d132cda7aabd9dcaa51f090c1955d20c2618466a0ea5acbaeac5a46e00b8869ca9a337eb5d9406592a790678a1f0bbe729054abb4810f4fdf50c517d4dd312b2d382412d45b9f60464c107c0735b16ceced73484f37cdcc8b9a4a62bc997bbd1d23b993fc5cfed9a43d2f4d335570e76715b020664bedb0db88816bc97ec37d13d64f604b71fc73f3c38954ae554e45997209afb0ff102dc170986e2d72e4178a7e6131308afa29ba732e251ebdf6254c0589752bfca3bef7fd0fc60ba683c6016b16234216bdcf8975bebafd8ee4606a96c1993d1f096b435fa84279344b914dec8e56566e103592a7ed44c63c8b5c18e01fa873032b1087622f225747339d38fa89e7008695ce0b3d6f505ab7ecdf99182ab7aa264d9108af35b0a373da18a8183f696dc70a8ac88c5663a866e89c7d7dbdf7296d63e5167978b38463ae9f36fe4121229e92cced04e", 0xffe4}], 0x1) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={@empty}) 05:28:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:12 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000040)) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@errors_recover='errors=recover', 0x22}]}) 05:28:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 310.262760][ T9728] ntfs: (device loop2): parse_options(): Invalid errors option argument: recover" 05:28:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 310.384606][ T9734] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:13 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2e9444, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0x34, 0x1c, 0x400, 0x70bd29, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x80, 0x4, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_LINK_NETNSID={0x8, 0xa, 0xfff}, @NDA_LINK_NETNSID={0x8, 0xa, 0x405}]}, 0x34}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x2bc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x5, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r2}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x2, 0x0, 0x9, 0x6}, {0x3, 0x7, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @user_linkup_enabled={{{0x0, 0x1, 'user_linkup_enabled\x00'}}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8001}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r11 = openat$autofs(0xffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x7ddf35d145f063ee, 0x0) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00') 05:28:13 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:13 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x4, {0xa, 0x4e21, 0x1f6f, @local, 0x3}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000440)={0x1, 0x3, 0x8, 0x1, 0x9319}) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)={0x6, 0x7ff, 0x7, 0x7, 0x2}) sysfs$2(0x2, 0x7, &(0x7f0000000480)=""/65) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_GET_CLOCK(r4, 0x8030ae7c, &(0x7f0000000080)) r5 = dup2(r0, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r6 = dup(0xffffffffffffffff) write$tun(r5, &(0x7f0000000240)={@val={0x0, 0x8884}, @void, @ipv6=@dccp_packet={0xe, 0x6, "8790af", 0x193, 0x21, 0x1, @rand_addr=' \x01\x00', @local, {[@routing={0x62, 0x8, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, @loopback, @remote]}, @fragment={0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x67}, @hopopts={0x2b, 0x5, [], [@calipso={0x7, 0x28, {0x0, 0x8, 0xc5, 0x9, [0x8, 0x148, 0x80, 0x2]}}, @ra={0x5, 0x2, 0x8000}]}], {{0x4e23, 0x4e22, 0x4, 0x1, 0x3, 0x0, 0x0, 0xa, 0x2, "bb4b2a", 0xfe, "36cca7"}, "cb178e6920432a45421fd24e074c7ad3c23741fd344d27e65f7c23bcd3df261d167f681012ad918dfd6df466794bb024f6f5acace9c97dffe392b2c24867ca515b2f2072dcad92ca436e729674a923f7cb9c96650518abd4d5f5a7cf3dc74c20bdff33b10034e8438bf13d4d2c580d65bc5809fd5d0ab9b8af2401426792303b29d21eeba9135aadef983f2e38320d27f310c910504faa0116e1019ee43e9e9d1e62af959255d203b9da43be0382b64571a132ee808baa8a5b812385a8d35cf96f3ab47d1d9870fd9e77f45e12b3b6c98c07a10e9fb0c5b9d361204e8fd3a0863bb662cc1208c28eddc77bea9d77365147aa3851130ff69977d7a6"}}}}, 0x1bf) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$netrom_NETROM_T4(r6, 0x103, 0x6, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x4) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000400)='net_prio.ifpriomap\x00', 0x2, 0x0) 05:28:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)={0x6c, 0x2, 0x1, 0x6, 0x0, [@local]}, 0x18) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000040)={0x9, 0x1, 0x1}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x24001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) [ 311.631062][ T9770] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:15 executing program 2: syz_emit_ethernet(0x84, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @gre={{0xb, 0x4, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast1}, {@local}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x8, 0x800, 0x4]}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$MON_IOCX_MFETCH(r1, 0xc00c9207, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000400)={0x7fffffff, {{0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0xfffffe01}}, 0x1, 0x3, [{{0xa, 0x4e23, 0x1, @remote, 0x7fff}}, {{0xa, 0x4e20, 0x2, @loopback, 0xb280}}, {{0xa, 0x4e24, 0x77, @dev={0xfe, 0x80, [], 0x39}}}]}, 0x20c) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000100)={0x3, 0x2, 0x1}) getsockname$unix(r5, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x40801) 05:28:15 executing program 2: r0 = gettid() r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1412, 0x200, 0x70bd26, 0x25dfdbfe}, 0x10}}, 0x8000) tkill(r0, 0x1004000000013) r2 = gettid() tkill(r2, 0x1004000000013) tgkill(r0, r2, 0x5) ioperm(0x0, 0x400, 0xfff) syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="0201630000000a100000ff45ac0000ffffff81000800000000000000024000ffffffa9000000e10000008877007200300700a6ffffff00000000008000da55aa", 0x40, 0x1c0}]) 05:28:15 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 312.954966][ T9803] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:15 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:16 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:16 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:16 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 313.994179][ T9820] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:16 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:17 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:17 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:17 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:17 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 315.076118][ T9843] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:18 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c00020008002d0002"], 0x3c}}, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)=""/140) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x3, 0x0) 05:28:18 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:18 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x280, 0x0) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)=0xc65) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x189000, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f00000000c0)) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000200)={0xfffffe00, 0x100000, 0xb1, &(0x7f0000000140)="74ea3ff645f9eac1ade89250165f0d61332dd63b9dd14d683c5fbcd45199373e6689ac08aa15661fa8138c63a18745d74e22016f1393455c241be26d7cf02414a681d27ef3d21ca1300d74da950f2f2b3d2fb5867bcc4ef1ebd9a73598349c59f2e32a36cf82ccb43197357ad2d038f04b3122d8a9d66b96663555e53c6a7312297a494c2990dd5183937e046d092b86b2c2da865301ec0d3b57707b6871fc357e45b816dd83429869b2bd3b3fb8f8ef93"}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) openat$ppp(0xffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x165043, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x64, 0x15, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, &(0x7f00000003c0)={0xffffffffffffffff, 0x2, 0x7, 0x2}) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0185649, &(0x7f0000000440)={0x9b0000, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x9e0904, 0xef7, [], @ptr=0x6}}) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000480)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)=[0x3, 0x80000001, 0x4, 0x401, 0x7f, 0x4, 0xf5, 0x3f], &(0x7f0000000500)=[0x0, 0x5, 0x3f, 0x1000, 0x1, 0x1ff], &(0x7f0000000540)=[0x1, 0x5, 0x8001, 0x80000000, 0x8], &(0x7f0000000580)=[0xb6b], 0x0, 0x4}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, &(0x7f0000000680)={0x980000, 0x7ff, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x9909d0, 0x62, [], @p_u32=&(0x7f0000000600)=0xff}}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x1410, 0x1, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48050}, 0x8080) r7 = openat$dlm_plock(0xffffff9c, &(0x7f00000007c0)='/dev/dlm_plock\x00', 0x488000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r7, 0x8008ae9d, &(0x7f0000000800)=""/192) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000900)={0xff, 0x1, 0x1, "0d121b88734092584c4c33b9e3cee48220fd21cfa4ef8ec469410d46a5c54dd7", 0x39555659}) 05:28:18 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:18 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 315.999124][ T9855] netlink: 'syz-executor.2': attribute type 45 has an invalid length. 05:28:19 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1, @fixed={[], 0x12}, 0x7}, 0xe) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x400c4150, &(0x7f00000000c0)={0x0, &(0x7f0000000080)="f3b68d984f432ed15025ea0e7d9acd9cb13de3b229776fcf2623", 0x1a}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x7f) 05:28:19 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) [ 316.734042][ T9876] IPVS: ftp: loaded support on port[0] = 21 05:28:19 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:19 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:19 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:19 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x8002f72cbb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) faccessat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="90000000ed03000827bd7000fcdbdf250e92776899c8d58176df089131763fe285f34b645407a41f9152b48f003831a1e942f512ecd543717ae18c3fc5eda415019884806cb64ee97c84448d301230e416b7ba383ea5cc236c098b7fab4d44462edbf462ea5450b895f242697949df376d3526dd9eb1bb32769c403df265a88bd0076fdc37bf4d8ef852f22bef87a07d"], 0x90}, 0x1, 0x0, 0x0, 0xed8a548eef681d13}, 0x4004005) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="d48df70e9e520b5a07f14a5a34c58cefde03da5b1942291c137dc60471a5f0efb645bbff937b532e7733b8f2c639608550e144ac92a370c7f3c1c0e7ee3e233ba703d34850d234aff6a260b0b55bd1d51cc9867384a7982ebf83d2262a4b9fe5220974b2611607d79b51cb693f58537a24438f9262fa4139cb247b59fa735e3992de925b8843728036662a97520bf4f247ed345feac2e0d29a90ee61d3634d09bf82e5b8ebc7a88fb083122a03dae01f50c7bfcb9f2d07100271e4921346ff9ab280daf17f9cbed044126073e12fffeea16d113d344bbfddd9720206f2abb7a07ed9", 0xe2}, {&(0x7f0000000180)="b7b1db992a6830ce6725c1fe3af953c35cba1b8f720a17d9c8e3e6c914a681e1d0f32266aa4643aebeaa638c0adafe2a81d2c70fc5c8ca685b701c9b4d0a66b1db12351192c05f996859e5a472fe000a7357", 0x52}], 0x2, &(0x7f0000000780)=[{0xb0, 0x10f, 0x1f, "a64ce4e17a77fc6390720f9f671b15f7b0810584def3880b37c7517732992c899f1a2bcfd9399439a516851473c30278cecbb9a072895b5c87aac7d6ab808de34fb4f6b6eb223722b602783b712f852c0cc7b17ffdda83082d97d51cd8927172b9bc477a8a9940dbe0c41bb1f1386292b1067bc04b4657da2ea3e26777e9e0660a73e39000c251098c3c93a2b79df6da3af583359441f116a3368ea25c6e0192a9bb036b"}, {0xa4, 0x10b, 0x8390, "6af55c1b8ef7c64041b6d30eea1bfb1cc9f28d3f8467f0365bb8c718242efe7e020ff93a79c3920438cc34acde8666264f405b8fa79b8096d4b9fa50e610863f9bdc904482d02efa46d6c1862f9125fd444431dd136038c31c4ecad53c10dafe8110927d1c5045640006ae056d2151b8724fde12b915fa16cb2cd24bdc55a5b398f1d44bdf85285c5b4013063e56a646ff729238c2bce2d8"}, {0x68, 0x108, 0xd83f, "5d5e064c84c101badc0369122fb33654de4a615c8f5c3a0aa1793f19a1b4e4e0c102cd8f64524e6a6a4c57472a8a9eaa5452e672f9d9e4229fd6975ee9fa35b0421e1a26fe3fe0695a715badcce64ce508ea24c3014731e26543"}, {0x100, 0x116, 0x3, "e1d6eaee722d1c7d2060f56f1616070181733cf22bfd8eae85a1858401a3b635a947b5e3ff43906282db6a79b13471490969f89e643f9851474d3a5f3cff7063ff4c0797eb206a040c5faca8922c35402985e3eaacb56f4f5b0ba6f74601d7c2d0aba6303241a9c753413bc6b3d26fda04d8873fe8617e3a19476e29319564d5928326ee8ab74658506db4386bcdce5a401e7995ea4c53fb1e02c257ab30cd7ff3cbe2ca4a8f24ef2f9a3cf1cc6dfd6e6799b9b23be1874806b8be6e1c30c194f6bbe6da24cc48195335ed8af64616405366cb1c3523edc9d086e626541c2891f287bc34d6958d8381201decb2bb5a8c55846bed"}], 0x2bc}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0101000000000000000001000000440001000c00070000000000960000000c0006006c626c637200000008000b000a69700008000800000000000800090000000000080001000a000000080005"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x118, r5, 0x818, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private1={0xfc, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x24004001}, 0xc080) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x2) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 05:28:20 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 317.330498][ T9876] chnl_net:caif_netlink_parms(): no params data found [ 317.474984][ T9996] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 05:28:20 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 317.522196][T10004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 317.627543][ T9996] IPVS: persistence engine module ip_vs_pe_ [ 317.627543][ T9996] ip not found [ 317.741874][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.749640][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.785761][ T9876] device bridge_slave_0 entered promiscuous mode [ 317.838998][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.846228][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.855924][ T9876] device bridge_slave_1 entered promiscuous mode [ 318.030163][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.086159][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.191612][ T9876] team0: Port device team_slave_0 added [ 318.205211][ T9876] team0: Port device team_slave_1 added [ 318.267196][T10013] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 318.290697][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.297838][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.324150][ T9876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.352581][T10013] IPVS: persistence engine module ip_vs_pe_ [ 318.352581][T10013] ip not found [ 318.473973][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.481677][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.507810][ T9876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.795857][ T9876] device hsr_slave_0 entered promiscuous mode [ 318.839058][ T9876] device hsr_slave_1 entered promiscuous mode [ 318.898805][ T9876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.906542][ T9876] Cannot create hsr debugfs directory [ 319.261257][ T9876] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.327027][ T9876] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 319.404699][ T9876] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.446294][ T9876] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.709434][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.754799][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.764142][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.783532][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.813398][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.822636][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.834251][ T2306] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.841535][ T2306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.894151][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.903465][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.913693][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.923024][ T2306] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.930303][ T2306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.978886][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.989859][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.000936][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.011299][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.049491][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.059585][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.069964][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.081082][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.090562][ T2306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.133038][ T9876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.146268][ T9876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.162283][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.172347][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.218336][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.226076][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.259523][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.319469][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.329431][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.403286][ T9876] device veth0_vlan entered promiscuous mode [ 320.412813][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.423394][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.454579][ T9876] device veth1_vlan entered promiscuous mode [ 320.466420][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.475683][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.484709][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.539068][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.549926][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.559769][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.575718][ T9876] device veth0_macvtap entered promiscuous mode [ 320.593527][ T9876] device veth1_macvtap entered promiscuous mode [ 320.636520][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 320.649245][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.659325][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 320.669887][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.679859][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 320.690497][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.704399][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.715167][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.725030][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.734335][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.744291][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.785672][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 320.798745][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.808776][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 320.819321][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.829285][ T9876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 320.839814][ T9876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.853639][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.867843][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.877939][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:28:24 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:24 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:24 executing program 2: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x341000, 0x8e) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/15, 0xf}], 0x2}}], 0x1, 0x0, 0x0) r5 = openat$vcs(0xffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x22c840, 0x0) recvmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000002380)=[{&(0x7f0000000900)=""/143, 0x8f}, {&(0x7f00000009c0)=""/170, 0xaa}, {&(0x7f0000000a80)=""/149, 0x95}, {&(0x7f0000000cc0)=""/211, 0xd3}, {&(0x7f0000001fc0)=""/239, 0xef}, {&(0x7f0000000b40)=""/120, 0x78}, {&(0x7f0000000f00)=""/115, 0x73}, {&(0x7f00000020c0)=""/175, 0xaf}, {&(0x7f0000002180)=""/206, 0xce}, {&(0x7f0000002280)=""/252, 0xfc}], 0xa, &(0x7f0000002400)=""/4096, 0x1000}, 0x40) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000100)=""/57, 0x39}, {&(0x7f0000000e00)=""/215, 0xd7}, {&(0x7f00000001c0)=""/61, 0x3d}], 0x4}, 0x0) 05:28:24 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:24 executing program 3: r0 = dup(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffdec, &(0x7f0000000040)={&(0x7f0000000800)=@ipv4_newrule={0x74, 0x20, 0x400, 0x70bd2a, 0x5ef0, {0x2, 0x80, 0x14, 0x9, 0xf6, 0x0, 0x0, 0x2, 0x10002}, [@FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x0, 0x18, {0x4e22, 0x4e22}}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fe4}]}, 0x74}}, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', r4, 0x2f, 0xe8, 0x81, 0x5, 0x8, @loopback, @private0={0xfc, 0x0, [], 0x1}, 0x700, 0x7fc7, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_delneigh={0x3c, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x3c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x388, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x63f0}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x388}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) connect$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) r11 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r11, 0x10d, 0x8f, 0x0, &(0x7f0000000080)) 05:28:24 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:24 executing program 2: r0 = getpgrp(0x0) socket$kcm(0x10, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x15, 0xc011, r1, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() clone(0x8003400, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(0x0, 0x0, 0x0, 0x0) 05:28:24 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:24 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:24 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:24 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:25 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 322.707974][T10182] loop_set_status: loop0 () has still dirty pages (nrpages=66) 05:28:25 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 322.888120][T10182] loop_set_status: loop0 () has still dirty pages (nrpages=32) 05:28:25 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:25 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:26 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:26 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:26 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 324.082115][T10210] loop_set_status: loop0 () has still dirty pages (nrpages=4) 05:28:27 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:27 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:27 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:27 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:28 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:28 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 325.407372][T10225] loop_set_status: loop0 () has still dirty pages (nrpages=66) 05:28:28 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:28 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:28 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:28 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x24000000) 05:28:28 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:28 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:29 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:29 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) 05:28:29 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 326.572510][T10253] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:29 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:29 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) 05:28:29 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 326.933374][T10263] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:29 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:29 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:29 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) 05:28:30 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 327.222336][T10274] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:30 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:30 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) 05:28:30 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 327.464399][T10284] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:30 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:30 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 327.817058][T10292] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:30 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) 05:28:30 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:30 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:30 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:31 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) 05:28:31 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 328.260984][T10309] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:31 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) 05:28:31 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 328.531204][T10322] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:31 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) 05:28:31 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xffffff7f}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) 05:28:31 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:31 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:31 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:31 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) [ 329.189880][T10344] xt_addrtype: both incoming and outgoing interface limitation cannot be selected 05:28:32 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) 05:28:32 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 329.352091][T10355] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:32 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) 05:28:32 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:32 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:32 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:32 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) [ 329.590003][T10361] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:32 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x5, 0x84) 05:28:32 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) 05:28:32 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:32 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 330.125629][T10379] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:33 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) 05:28:33 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:33 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socket$inet6_sctp(0xa, 0x5, 0x84) 05:28:33 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 330.586223][T10393] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:33 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 330.853727][T10398] IPVS: ftp: loaded support on port[0] = 21 [ 330.915147][T10401] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.511780][T10398] chnl_net:caif_netlink_parms(): no params data found [ 331.692867][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.700229][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.709695][T10398] device bridge_slave_0 entered promiscuous mode [ 331.751201][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.758631][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.768246][T10398] device bridge_slave_1 entered promiscuous mode [ 331.872386][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.890738][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.973076][T10398] team0: Port device team_slave_0 added [ 331.987510][T10398] team0: Port device team_slave_1 added [ 332.053286][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.060413][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.087278][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.130120][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.137658][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.163757][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.294346][T10398] device hsr_slave_0 entered promiscuous mode [ 332.344636][T10398] device hsr_slave_1 entered promiscuous mode [ 332.386522][T10398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.394134][T10398] Cannot create hsr debugfs directory [ 332.700912][T10398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.764543][T10398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.804084][T10398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.901497][T10398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.130121][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.173457][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.182343][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.210811][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.245220][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 333.255136][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.265079][T10027] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.272459][T10027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.359168][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 333.368564][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 333.378329][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.387554][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.394732][T10027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.403764][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 333.414357][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 333.425166][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 333.435449][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 333.445650][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.455955][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.466193][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.475724][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.499881][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.509519][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.519066][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.533600][T10398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.609318][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.617576][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.639760][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.818904][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.829290][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.909317][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.919859][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.937937][T10398] device veth0_vlan entered promiscuous mode [ 333.949520][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.959130][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.997134][T10398] device veth1_vlan entered promiscuous mode [ 334.064228][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.073952][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.083459][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.093238][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.123677][T10398] device veth0_macvtap entered promiscuous mode [ 334.147888][T10398] device veth1_macvtap entered promiscuous mode [ 334.193655][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.204653][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.214757][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.225312][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.235334][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.245891][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.255865][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 334.266516][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.280265][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.293283][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.303370][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 334.312715][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 334.322441][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.352375][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.363156][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.373173][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.385072][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.395063][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.405603][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.415564][T10398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 334.426109][T10398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.439838][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.451992][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 334.462407][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:28:38 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:38 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:38 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:38 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:38 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:38 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:38 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:38 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:38 executing program 2: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:38 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:38 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:38 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:39 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:39 executing program 2: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:39 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 336.532323][T10674] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:39 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:39 executing program 0: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:39 executing program 2: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:39 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 336.999949][T10688] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:39 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:39 executing program 0: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:40 executing program 2: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:40 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 337.472201][T10702] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:40 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:40 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:40 executing program 0: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:40 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:40 executing program 2: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:40 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:40 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 338.289763][T10726] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:41 executing program 2: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:41 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:41 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:41 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:41 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:41 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:41 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 338.867435][T10744] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:41 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:41 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:41 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:41 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) [ 339.234960][T10756] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:42 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:42 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:42 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:42 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:42 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:42 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:42 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:42 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:42 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:42 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:42 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:42 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:43 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 05:28:43 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 05:28:43 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:43 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:43 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:43 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:43 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000240)) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:43 executing program 2: openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) 05:28:43 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:43 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:43 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 05:28:43 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) 05:28:43 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:44 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/41, 0x29) 05:28:44 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:44 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:44 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) 05:28:44 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:44 executing program 2: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) 05:28:44 executing program 1: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x204, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x260) 05:28:44 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:44 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:44 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:44 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:45 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:45 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 342.346164][T10873] loop_set_status: loop0 () has still dirty pages (nrpages=2) 05:28:45 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:45 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:45 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:45 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:45 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:45 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:45 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:45 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:45 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:46 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:46 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:46 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:46 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:46 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:46 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:46 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:46 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:47 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:47 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:47 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:47 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:47 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:47 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 2: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:48 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 5 (fault-call:2 fault-nth:0): clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:48 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:48 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:48 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:48 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:49 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:49 executing program 4: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:49 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 346.990851][T11018] IPVS: ftp: loaded support on port[0] = 21 [ 347.250576][T11018] chnl_net:caif_netlink_parms(): no params data found [ 347.556084][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.563319][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.573938][T11018] device bridge_slave_0 entered promiscuous mode [ 347.613925][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.622606][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.632223][T11018] device bridge_slave_1 entered promiscuous mode [ 347.755925][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.768475][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.851477][T11018] team0: Port device team_slave_0 added [ 347.873060][T11018] team0: Port device team_slave_1 added [ 347.913886][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.921073][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.952474][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.972248][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.979907][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.005976][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.089881][T11018] device hsr_slave_0 entered promiscuous mode [ 348.128557][T11018] device hsr_slave_1 entered promiscuous mode [ 348.187128][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.194842][T11018] Cannot create hsr debugfs directory [ 348.460977][T11018] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.513804][T11018] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.571163][T11018] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 348.635734][T11018] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.833336][T11018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.863929][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.873292][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.895412][T11018] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.916042][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.925890][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.935557][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.942743][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.953614][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.993054][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.002977][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.012327][T10027] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.019615][T10027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.057445][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.069630][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.103361][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.114070][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.124516][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.134673][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.163573][T11018] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.174727][T11018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.205336][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.216060][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.225595][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.235851][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.245351][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.283708][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.305024][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.313989][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.322453][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.506894][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.516152][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.581161][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.590804][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.611858][T11018] device veth0_vlan entered promiscuous mode [ 349.620672][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.630047][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.653964][T11018] device veth1_vlan entered promiscuous mode [ 349.712558][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.722402][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.731904][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.741774][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.762864][T11018] device veth0_macvtap entered promiscuous mode [ 349.778914][T11018] device veth1_macvtap entered promiscuous mode [ 349.820079][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.833346][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.843414][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.853969][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.863959][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.874533][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.884514][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.895120][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.905159][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 349.915746][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.928336][T11018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.941863][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 349.951711][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 349.961096][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 349.971139][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.993115][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.003810][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.013900][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.025965][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.035977][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.046528][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.056538][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.067099][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.077093][T11018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 350.087644][T11018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.101418][T11018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.111080][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.121162][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.512630][T11249] FAULT_INJECTION: forcing a failure. [ 350.512630][T11249] name failslab, interval 1, probability 0, space 0, times 1 [ 350.525580][T11249] CPU: 0 PID: 11249 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 350.534309][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 350.544427][T11249] Call Trace: [ 350.547828][T11249] dump_stack+0x1df/0x240 [ 350.552254][T11249] should_fail+0x8b7/0x9e0 [ 350.556768][T11249] __should_failslab+0x1f6/0x290 [ 350.561778][T11249] should_failslab+0x29/0x70 [ 350.566461][T11249] __kmalloc_node+0x1b1/0x11f0 [ 350.571304][T11249] ? kvmalloc_node+0x19a/0x3d0 [ 350.576158][T11249] kvmalloc_node+0x19a/0x3d0 [ 350.580977][T11249] xt_alloc_table_info+0xbb/0x190 [ 350.586132][T11249] compat_do_ipt_set_ctl+0x434/0x3c20 [ 350.591586][T11249] ? kmsan_get_metadata+0x11d/0x180 [ 350.596859][T11249] ? kmsan_set_origin_checked+0x95/0xf0 [ 350.602478][T11249] ? __local_bh_enable_ip+0x97/0x1d0 [ 350.607942][T11249] ? release_sock+0x238/0x2a0 [ 350.612716][T11249] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 350.618864][T11249] ? kmsan_get_metadata+0x4f/0x180 [ 350.624053][T11249] ? do_ipt_set_ctl+0x9e0/0x9e0 [ 350.629075][T11249] compat_nf_sockopt+0x7af/0x830 [ 350.634118][T11249] compat_nf_setsockopt+0x122/0x160 [ 350.639463][T11249] compat_ip_setsockopt+0x475/0x1550 [ 350.644845][T11249] ? kmsan_internal_set_origin+0x75/0xb0 [ 350.650560][T11249] ? __msan_poison_alloca+0xf0/0x120 [ 350.655938][T11249] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 350.662317][T11249] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 350.668670][T11249] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 350.674549][T11249] ? selinux_netlbl_socket_setsockopt+0x1b3/0x6e0 [ 350.681054][T11249] ? kmsan_get_metadata+0x11d/0x180 [ 350.686343][T11249] ? do_ip_setsockopt+0x56b0/0x56b0 [ 350.691661][T11249] inet_csk_compat_setsockopt+0x229/0x250 [ 350.697455][T11249] compat_tcp_setsockopt+0x167/0x180 [ 350.702792][T11249] ? do_tcp_setsockopt+0x4180/0x4180 [ 350.708157][T11249] compat_sock_common_setsockopt+0x238/0x260 [ 350.714211][T11249] ? sock_common_setsockopt+0x170/0x170 [ 350.719858][T11249] __compat_sys_setsockopt+0x4ed/0x910 [ 350.725410][T11249] ? kmsan_get_metadata+0x4f/0x180 [ 350.730565][T11249] __se_compat_sys_setsockopt+0xdd/0x100 [ 350.736329][T11249] ? get_compat_bpf_fprog+0x290/0x290 [ 350.741745][T11249] __ia32_compat_sys_setsockopt+0x62/0x80 [ 350.747524][T11249] __do_fast_syscall_32+0x2aa/0x400 [ 350.752830][T11249] do_fast_syscall_32+0x6b/0xd0 [ 350.757711][T11249] do_SYSENTER_32+0x73/0x90 [ 350.762270][T11249] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 350.768604][T11249] RIP: 0023:0xf7f55549 [ 350.772677][T11249] Code: Bad RIP value. [ 350.776748][T11249] RSP: 002b:00000000f5d500cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 350.785190][T11249] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 350.793214][T11249] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000288 [ 350.801218][T11249] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.809213][T11249] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 350.817236][T11249] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 05:28:53 executing program 5 (fault-call:2 fault-nth:1): clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:53 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:53 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:53 executing program 1: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:53 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:53 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 351.141309][T11265] FAULT_INJECTION: forcing a failure. [ 351.141309][T11265] name failslab, interval 1, probability 0, space 0, times 0 [ 351.158794][T11265] CPU: 0 PID: 11265 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 [ 351.167547][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.177654][T11265] Call Trace: [ 351.181035][T11265] dump_stack+0x1df/0x240 [ 351.185468][T11265] should_fail+0x8b7/0x9e0 [ 351.189995][T11265] __should_failslab+0x1f6/0x290 [ 351.195013][T11265] should_failslab+0x29/0x70 [ 351.199703][T11265] kmem_cache_alloc_node_trace+0x109/0xe60 [ 351.205592][T11265] ? __se_compat_sys_setsockopt+0xdd/0x100 [ 351.211492][T11265] ? do_fast_syscall_32+0x6b/0xd0 [ 351.216601][T11265] ? __get_vm_area_node+0x30c/0x800 [ 351.221879][T11265] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 351.228479][T11265] ? kmsan_get_metadata+0x11d/0x180 [ 351.233780][T11265] __get_vm_area_node+0x30c/0x800 [ 351.238888][T11265] ? should_fail+0x208/0x9e0 [ 351.243588][T11265] __vmalloc_node_range+0x282/0x11f0 [ 351.248968][T11265] ? xt_compat_init_offsets+0x222/0x3c0 [ 351.254649][T11265] vmalloc+0x117/0x130 [ 351.258812][T11265] ? xt_compat_init_offsets+0x222/0x3c0 [ 351.264473][T11265] ? xt_compat_init_offsets+0x222/0x3c0 [ 351.270126][T11265] xt_compat_init_offsets+0x222/0x3c0 [ 351.275593][T11265] compat_do_ipt_set_ctl+0x6cd/0x3c20 [ 351.281048][T11265] ? kmsan_get_metadata+0x11d/0x180 [ 351.286326][T11265] ? kmsan_set_origin_checked+0x95/0xf0 [ 351.291960][T11265] ? __local_bh_enable_ip+0x97/0x1d0 [ 351.297344][T11265] ? release_sock+0x238/0x2a0 [ 351.302117][T11265] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 351.308275][T11265] ? kmsan_get_metadata+0x4f/0x180 [ 351.313461][T11265] ? do_ipt_set_ctl+0x9e0/0x9e0 [ 351.318410][T11265] compat_nf_sockopt+0x7af/0x830 [ 351.323465][T11265] compat_nf_setsockopt+0x122/0x160 [ 351.328788][T11265] compat_ip_setsockopt+0x475/0x1550 [ 351.334169][T11265] ? kmsan_internal_set_origin+0x75/0xb0 [ 351.339887][T11265] ? __msan_poison_alloca+0xf0/0x120 [ 351.345269][T11265] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 351.351685][T11265] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 351.358100][T11265] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 351.363997][T11265] ? selinux_netlbl_socket_setsockopt+0x1b3/0x6e0 [ 351.370492][T11265] ? kmsan_get_metadata+0x11d/0x180 [ 351.375780][T11265] ? do_ip_setsockopt+0x56b0/0x56b0 [ 351.381075][T11265] inet_csk_compat_setsockopt+0x229/0x250 [ 351.386878][T11265] compat_tcp_setsockopt+0x167/0x180 [ 351.392244][T11265] ? do_tcp_setsockopt+0x4180/0x4180 [ 351.397617][T11265] compat_sock_common_setsockopt+0x238/0x260 [ 351.403692][T11265] ? sock_common_setsockopt+0x170/0x170 [ 351.409314][T11265] __compat_sys_setsockopt+0x4ed/0x910 [ 351.414876][T11265] ? kmsan_get_metadata+0x4f/0x180 [ 351.420065][T11265] __se_compat_sys_setsockopt+0xdd/0x100 [ 351.425975][T11265] ? get_compat_bpf_fprog+0x290/0x290 [ 351.431554][T11265] __ia32_compat_sys_setsockopt+0x62/0x80 [ 351.437375][T11265] __do_fast_syscall_32+0x2aa/0x400 [ 351.442682][T11265] do_fast_syscall_32+0x6b/0xd0 [ 351.447632][T11265] do_SYSENTER_32+0x73/0x90 [ 351.452208][T11265] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 351.458584][T11265] RIP: 0023:0xf7f55549 [ 351.462680][T11265] Code: Bad RIP value. [ 351.466786][T11265] RSP: 002b:00000000f5d500cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 351.475266][T11265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 351.483289][T11265] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000288 [ 351.491428][T11265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.499459][T11265] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.507485][T11265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.515728][T11265] syz-executor.5: vmalloc: allocation failure: 24 bytes, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.528672][T11265] CPU: 0 PID: 11265 Comm: syz-executor.5 Not tainted 5.8.0-rc5-syzkaller #0 05:28:54 executing program 4: openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:54 executing program 1: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:54 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 351.537405][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 351.547507][T11265] Call Trace: [ 351.550876][T11265] dump_stack+0x1df/0x240 [ 351.555279][T11265] warn_alloc+0x4cc/0x680 [ 351.559729][T11265] __vmalloc_node_range+0xe98/0x11f0 [ 351.565123][T11265] vmalloc+0x117/0x130 [ 351.569278][T11265] ? xt_compat_init_offsets+0x222/0x3c0 [ 351.574907][T11265] ? xt_compat_init_offsets+0x222/0x3c0 [ 351.580544][T11265] xt_compat_init_offsets+0x222/0x3c0 [ 351.586002][T11265] compat_do_ipt_set_ctl+0x6cd/0x3c20 [ 351.591446][T11265] ? kmsan_get_metadata+0x11d/0x180 [ 351.596718][T11265] ? kmsan_set_origin_checked+0x95/0xf0 [ 351.602335][T11265] ? __local_bh_enable_ip+0x97/0x1d0 [ 351.607820][T11265] ? release_sock+0x238/0x2a0 [ 351.612586][T11265] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 351.618737][T11265] ? kmsan_get_metadata+0x4f/0x180 [ 351.623933][T11265] ? do_ipt_set_ctl+0x9e0/0x9e0 [ 351.628871][T11265] compat_nf_sockopt+0x7af/0x830 [ 351.633916][T11265] compat_nf_setsockopt+0x122/0x160 [ 351.639209][T11265] compat_ip_setsockopt+0x475/0x1550 [ 351.644583][T11265] ? kmsan_internal_set_origin+0x75/0xb0 [ 351.650298][T11265] ? __msan_poison_alloca+0xf0/0x120 [ 351.655686][T11265] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 351.662094][T11265] ? selinux_netlbl_socket_setsockopt+0xd2/0x6e0 [ 351.668504][T11265] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 351.674399][T11265] ? selinux_netlbl_socket_setsockopt+0x1b3/0x6e0 [ 351.680891][T11265] ? kmsan_get_metadata+0x11d/0x180 [ 351.687489][T11265] ? do_ip_setsockopt+0x56b0/0x56b0 [ 351.692785][T11265] inet_csk_compat_setsockopt+0x229/0x250 [ 351.698594][T11265] compat_tcp_setsockopt+0x167/0x180 [ 351.703957][T11265] ? do_tcp_setsockopt+0x4180/0x4180 [ 351.709325][T11265] compat_sock_common_setsockopt+0x238/0x260 [ 351.715488][T11265] ? sock_common_setsockopt+0x170/0x170 [ 351.721111][T11265] __compat_sys_setsockopt+0x4ed/0x910 [ 351.726660][T11265] ? kmsan_get_metadata+0x4f/0x180 [ 351.731843][T11265] __se_compat_sys_setsockopt+0xdd/0x100 [ 351.737571][T11265] ? get_compat_bpf_fprog+0x290/0x290 [ 351.743023][T11265] __ia32_compat_sys_setsockopt+0x62/0x80 [ 351.748824][T11265] __do_fast_syscall_32+0x2aa/0x400 [ 351.754120][T11265] do_fast_syscall_32+0x6b/0xd0 [ 351.759060][T11265] do_SYSENTER_32+0x73/0x90 [ 351.763642][T11265] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 351.770019][T11265] RIP: 0023:0xf7f55549 [ 351.774113][T11265] Code: Bad RIP value. [ 351.778217][T11265] RSP: 002b:00000000f5d500cc EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 351.786689][T11265] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 351.794709][T11265] RDX: 0000000000000040 RSI: 0000000020000340 RDI: 0000000000000288 [ 351.802724][T11265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.810744][T11265] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 351.818764][T11265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.826922][T11265] Mem-Info: [ 351.830261][T11265] active_anon:130566 inactive_anon:4795 isolated_anon:0 [ 351.830261][T11265] active_file:6875 inactive_file:42916 isolated_file:0 [ 351.830261][T11265] unevictable:0 dirty:89 writeback:0 [ 351.830261][T11265] slab_reclaimable:7974 slab_unreclaimable:19367 [ 351.830261][T11265] mapped:60142 shmem:5006 pagetables:2369 bounce:0 [ 351.830261][T11265] free:240383 free_pcp:1094 free_cma:0 [ 351.867511][T11265] Node 0 active_anon:521476kB inactive_anon:19156kB active_file:27336kB inactive_file:171612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214652kB dirty:272kB writeback:0kB shmem:19996kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 376832kB writeback_tmp:0kB all_unreclaimable? no [ 351.895956][T11265] Node 1 active_anon:788kB inactive_anon:24kB active_file:164kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25916kB dirty:84kB writeback:0kB shmem:28kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB all_unreclaimable? no [ 351.922730][T11265] Node 0 DMA free:4096kB min:168kB low:208kB high:248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.951771][T11265] lowmem_reserve[]: 0 996 1136 1136 [ 351.957250][T11265] Node 0 DMA32 free:45672kB min:42412kB low:53012kB high:63612kB reserved_highatomic:0KB active_anon:519600kB inactive_anon:10780kB active_file:12904kB inactive_file:167928kB unevictable:0kB writepending:264kB present:3129332kB managed:1019904kB mlocked:0kB kernel_stack:1632kB pagetables:8460kB bounce:0kB free_pcp:2864kB local_pcp:1356kB free_cma:0kB [ 351.990430][T11265] lowmem_reserve[]: 0 0 140 140 [ 351.995486][T11265] Node 0 Normal free:7436kB min:5964kB low:7452kB high:8940kB reserved_highatomic:0KB active_anon:1876kB inactive_anon:8376kB active_file:14432kB inactive_file:3684kB unevictable:0kB writepending:8kB present:786432kB managed:147484kB mlocked:0kB kernel_stack:2792kB pagetables:372kB bounce:0kB free_pcp:284kB local_pcp:148kB free_cma:0kB [ 352.027231][T11265] lowmem_reserve[]: 0 0 0 0 [ 352.031818][T11265] Node 1 Normal free:904264kB min:41560kB low:51948kB high:62336kB reserved_highatomic:0KB active_anon:792kB inactive_anon:24kB active_file:164kB inactive_file:52kB unevictable:0kB writepending:124kB present:3932160kB managed:999424kB mlocked:0kB kernel_stack:124kB pagetables:612kB bounce:0kB free_pcp:1204kB local_pcp:600kB free_cma:0kB [ 352.063651][T11265] lowmem_reserve[]: 0 0 0 0 [ 352.068360][T11265] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 352.080434][T11265] Node 0 DMA32: 262*4kB (UME) 104*8kB (UME) 75*16kB (UME) 58*32kB (UME) 29*64kB (UME) 2*128kB (UM) 1*256kB (E) 1*512kB (E) 1*1024kB (M) 2*2048kB (ME) 8*4096kB (UM) = 45704kB [ 352.098174][T11265] Node 0 Normal: 37*4kB (UM) 11*8kB (UME) 6*16kB (UE) 2*32kB (UE) 4*64kB (UME) 5*128kB (UME) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 0*4096kB = 7436kB [ 352.114828][T11265] Node 1 Normal: 0*4kB 1*8kB (E) 2*16kB (ME) 2*32kB (UE) 1*64kB (U) 1*128kB (U) 1*256kB (M) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UM) 219*4096kB (M) = 904232kB [ 352.131283][T11265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.141023][T11265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.150492][T11265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 352.160221][T11265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 352.169667][T11265] 52240 total pagecache pages [ 352.174487][T11265] 0 pages in swap cache [ 352.178700][T11265] Swap cache stats: add 0, delete 0, find 0/0 [ 352.184910][T11265] Free swap = 0kB [ 352.188664][T11265] Total swap = 0kB [ 352.192420][T11265] 1965979 pages RAM 05:28:54 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 352.196375][T11265] 0 pages HighMem/MovableOnly [ 352.201084][T11265] 1423252 pages reserved [ 352.205479][T11265] 0 pages cma reserved 05:28:55 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:55 executing program 5: r0 = semget(0x0, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000180)={{0x4, @name="e86f91554dc2d4d6f7ea2e01855849f2f2d3ac9ffb71bcd9381ff425a4d78f10"}, 0x8, 0x101, 0x1}) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @dev}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{0x3, r3, 0xee00, r5, 0xffffffffffffffff, 0x0, 0x5}, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:55 executing program 1: exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:55 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:55 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0xfffb, 0x400}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:55 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:55 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:55 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 353.176363][T11304] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:56 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:56 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:56 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:56 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 353.863852][T11331] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:56 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:28:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = openat$zero(0xffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x402000, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000080)={0x4, 0xfffffc00, 0x400, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a091c, 0x7fff, [], @p_u32=&(0x7f0000000000)=0x3ff}}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$md(0xffffff9c, &(0x7f0000000200)='/dev/md0\x00', 0xbe03b3283d677407, 0x0) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000240)) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000280)={0x1ff, 0x0, [], {0x0, @bt={0x8, 0x0, 0x1, 0x3, 0x0, 0x6f5f, 0x1000, 0x1000, 0x4, 0x5, 0x8, 0x1, 0xfffffff9, 0x178, 0xa, 0x10, {0xa3, 0x2}, 0x7, 0x2}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r9, 0x28, 0x6, &(0x7f0000000600), 0x8) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='veth1_vlan\x00', 0x10) 05:28:56 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:56 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:57 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:57 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 354.407888][T11345] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) [ 354.461445][T11346] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:57 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x448000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) rt_sigreturn() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0xfffffffffffffefa) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r5 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r6 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x8, 0x701380) r7 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="0500"/24, @ANYRES32, @ANYBLOB="00000000001000"/28, @ANYRES32, @ANYBLOB="00000000d77b00"/28, @ANYRES32=r5, @ANYBLOB='\x00'/28, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00@\x00'/28]) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000080)={0x7, 0x3, 0x1}) 05:28:57 executing program 3: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:57 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 354.754835][T11363] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:57 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:57 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x228, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x194, 0x198, 0x198, 0x194, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x80, 0x0, 0x4, 'syz1\x00'}}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x284) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @loopback}, &(0x7f0000000280)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=@bridge_delneigh={0x30, 0x1d, 0x100, 0x70bd28, 0x25dfdbfd, {0x1c, 0x0, 0x0, r5, 0x4, 0x29}, [@NDA_MASTER={0x8, 0x9, 0x9}, @NDA_LLADDR={0xa, 0x2, @dev={[], 0x1f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8880}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16=r4], 0x58}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x4) r8 = dup(r6) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_netdev_private(r8, 0x89f4, &(0x7f0000000000)="af277f78b855b453d936b4") getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_SMI(r2, 0xaeb7) 05:28:57 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x4, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:57 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 3: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 3: fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r0 = dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000240)) r1 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:58 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80580, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000040)={{0x1, @name="03d22832f10eae86d04ba84d808c89d9865f3d70bfa40f535e16ab23ca3df3a8"}, 0x8, 0x100000001, 0x5}) 05:28:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:58 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:58 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 356.274117][T11422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 356.324869][T11427] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:59 executing program 3: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:59 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:59 executing program 0: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x5, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="03000000bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:59 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/141) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:28:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:28:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:28:59 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 356.959703][T11455] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:59 executing program 0: futex(&(0x7f0000000080), 0x800000000005, 0x0, 0x0, &(0x7f00000000c0), 0xc3400007) 05:28:59 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) [ 357.029699][T11456] xt_CT: You must specify a L4 protocol and not use inversions on it 05:28:59 executing program 3: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 357.265884][T11468] futex_wake_op: syz-executor.0 tries to shift op by 1024; fix this program [ 357.285035][T11468] futex_wake_op: syz-executor.0 tries to shift op by 1024; fix this program 05:29:00 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4d) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xf6, &(0x7f0000000140), &(0x7f00000000c0)=0x4) 05:29:00 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:29:00 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) [ 357.589882][ T32] audit: type=1400 audit(1595050140.316:18): avc: denied { name_bind } for pid=11478 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 357.612513][ T32] audit: type=1400 audit(1595050140.316:19): avc: denied { node_bind } for pid=11478 comm="syz-executor.0" src=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 05:29:00 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r4, 0xd, 0x0, 0x0, {0x11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffff64}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20004004) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) 05:29:00 executing program 3: r0 = openat$ttyS3(0xffffff9c, 0x0, 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 357.634782][ T32] audit: type=1400 audit(1595050140.346:20): avc: denied { name_connect } for pid=11478 comm="syz-executor.0" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 05:29:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000140)) 05:29:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 357.952513][T11491] xt_CT: You must specify a L4 protocol and not use inversions on it 05:29:00 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:29:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x70, 0x0, &(0x7f0000000100)) 05:29:01 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185647, &(0x7f0000000080)={0x9c0000, 0x6df2, 0x0, r0, 0x0, &(0x7f0000000040)={0x980919, 0xc039, [], @p_u32=&(0x7f0000000000)=0x8}}) setsockopt$inet_tcp_int(r3, 0x6, 0x3f, &(0x7f00000000c0)=0x30aaa408, 0x4) 05:29:01 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:01 executing program 4: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 358.529135][T11516] xt_CT: You must specify a L4 protocol and not use inversions on it 05:29:01 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 05:29:01 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) 05:29:01 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:01 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local, @random="c2d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1=0xe00001b4}, "0200000000000000"}}}}}, 0x0) 05:29:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380), 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 358.883759][T11536] xt_CT: You must specify a L4 protocol and not use inversions on it 05:29:01 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:01 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 358.933302][T11540] xt_CT: You must specify a L4 protocol and not use inversions on it 05:29:01 executing program 4: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x8, 0x4}]}]}}, &(0x7f0000000100)=""/147, 0x3e, 0x93, 0x8}, 0x20) 05:29:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="0300", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:02 executing program 4: syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:02 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:02 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 359.652498][T11559] BPF:[1] FUNC_PROTO (anon) [ 359.657683][T11559] BPF:return=0 args=( [ 359.661715][T11559] BPF:0 (anon) [ 359.665358][T11559] BPF:, 0 (anon) [ 359.668959][T11559] BPF:, 4 (invalid-name-offset) [ 359.673957][T11559] BPF:) [ 359.676752][T11559] BPF: [ 359.679552][T11559] BPF:Invalid arg#1 [ 359.683502][T11559] BPF: [ 359.683502][T11559] 05:29:02 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x8, 0x4}]}]}}, &(0x7f0000000100)=""/147, 0x3e, 0x93, 0x8}, 0x20) [ 359.938259][T11574] BPF:[1] FUNC_PROTO (anon) [ 359.943134][T11574] BPF:return=0 args=( [ 359.947400][T11574] BPF:0 (anon) [ 359.950820][T11574] BPF:, 0 (anon) [ 359.954595][T11574] BPF:, 4 (invalid-name-offset) [ 359.959481][T11574] BPF:) [ 359.962282][T11574] BPF: [ 359.965573][T11574] BPF:Invalid arg#1 [ 359.969418][T11574] BPF: [ 359.969418][T11574] 05:29:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 05:29:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="0300", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:02 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:02 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x8, 0x4}]}]}}, &(0x7f0000000100)=""/147, 0x3e, 0x93, 0x8}, 0x20) 05:29:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x2, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="0300", 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 360.524670][T11590] BPF:[1] FUNC_PROTO (anon) [ 360.529406][T11590] BPF:return=0 args=( [ 360.534153][T11590] BPF:0 (anon) [ 360.537598][T11590] BPF:, 0 (anon) [ 360.541188][T11590] BPF:, 4 (invalid-name-offset) [ 360.546229][T11590] BPF:) [ 360.549025][T11590] BPF: [ 360.551822][T11590] BPF:Invalid arg#1 [ 360.555820][T11590] BPF: [ 360.555820][T11590] 05:29:03 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:03 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:03 executing program 0: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {0x8, 0x4}]}]}}, &(0x7f0000000100)=""/147, 0x3e, 0x93, 0x8}, 0x20) 05:29:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 05:29:03 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) [ 361.119902][T11602] BPF:[1] FUNC_PROTO (anon) [ 361.124997][T11602] BPF:return=0 args=( [ 361.129025][T11602] BPF:0 (anon) [ 361.132441][T11602] BPF:, 0 (anon) [ 361.136231][T11602] BPF:, 4 (invalid-name-offset) [ 361.141111][T11602] BPF:) [ 361.144216][T11602] BPF: [ 361.147027][T11602] BPF:Invalid arg#1 [ 361.150868][T11602] BPF: [ 361.150868][T11602] 05:29:03 executing program 1: clone(0x20007844dfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x37000, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:04 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a9721c8a2e92aa650000000000003a096ceffe"}) 05:29:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) 05:29:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:04 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}, 0x22}]}) 05:29:04 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000c40)={0x78, 0x0, 0x9, 0x5, 0x7}) 05:29:04 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0x37000, 0x0}, &(0x7f0000001380)="030000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe}) 05:29:04 executing program 0: unshare(0x46000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8000008031, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) 05:29:05 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 362.382940][T11623] JFS: charset not found [ 362.410434][T11641] IPVS: ftp: loaded support on port[0] = 21 [ 362.613645][T11623] JFS: charset not found 05:29:05 executing program 2: syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='commit=']) 05:29:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udplite\x00') preadv(r0, &(0x7f00000009c0)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x64) 05:29:05 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000300)=""/41, 0x29) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x0, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:06 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:06 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mkdir(&(0x7f0000000180)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffd]}, 0x0, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) fcntl$setsig(r1, 0xa, 0x20) inotify_add_watch(r1, &(0x7f0000000140)='./control\x00', 0xe4000c64) rmdir(&(0x7f0000000080)='./control\x00') 05:29:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 363.893335][ T1478] tipc: TX() has been purged, node left! 05:29:06 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 364.303236][T11679] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue [ 364.318648][T11641] IPVS: ftp: loaded support on port[0] = 21 05:29:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:08 executing program 0: clock_getres(0x3, 0x0) 05:29:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000002a00010625bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3ff0c0008518f"], 0x44}}, 0x0) 05:29:08 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:08 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:29:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x0, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:08 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {0x0}, {}, {}, {}, {}, {}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4080) r8 = dup(r5) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001c006b5dbad56b627d30000000000000", @ANYRES32=r9, @ANYBLOB="000000000a000200aaaaaaaaaaaa00001400010000000000000000000000000000000001"], 0x3c}}, 0x0) recvfrom(r0, &(0x7f0000000600)=""/251, 0xfb, 0x10162, &(0x7f00000001c0)=@isdn={0x22, 0x2, 0xc3, 0x27, 0xf9}, 0x80) ioctl$DRM_IOCTL_DMA(r2, 0xc0286429, &(0x7f0000000180)={r3, 0x3, &(0x7f0000000080)=[0x0, 0x7f, 0x800], &(0x7f00000000c0)=[0x1], 0x35, 0x3, 0x0, &(0x7f0000000100)=[0x401, 0x38000000, 0x8], &(0x7f0000000140)=[0x7, 0x0, 0x3]}) [ 366.014944][T11736] xt_CT: You must specify a L4 protocol and not use inversions on it 05:29:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 366.141127][T11748] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.306883][T11753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:29:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r1, 0x90fc047e054328f9, 0x0, 0x0, {}, [@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xffffffffffffff26}]}]}, 0x1c}}, 0x0) 05:29:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000004e001f000307f4f9002304000a04f51108000100020100020800038005000000", 0x24) 05:29:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x0, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:09 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 366.660442][T11762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 366.678456][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.693864][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.779572][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 05:29:09 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:29:09 executing program 0: r0 = socket(0x15, 0x80005, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) 05:29:09 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x2, 0x3, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ac, 0x198, 0x198, 0x1ac, 0x198, 0x3, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00', {}, {}, 0x23, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x3, 0x0, 0x1, 0x1], 0x1, 0x5}, {0x0, [0x7, 0x5, 0x0, 0x4, 0x0, 0x4], 0x1, 0x7}}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x29c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4) r5 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x28000) r6 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xcet\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82\x00\x00\x00\x00\x00', 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) r7 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r8 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r8, &(0x7f0000000340), 0x0, 0x81805) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) sendfile(r7, r7, 0x0, 0x24000000) sendmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="95631491e575779884d90f471c4a26fe3eaed21aa317e949672e23c5b13e56cf8c53cf78135326dcebfde7e7c01e8865f303d510f524a47b4e15", 0x3a}, {&(0x7f0000000180)="03defc29d4298d00ed7bc5bf410efeac0eb8fc176dd494fea173b7ccc73315d938b0fa17815978b66a79a165b362095378304859aa059bb280a7698e51008b4dde3974e257351403e51efc98fca81054883945f3012ce9de", 0x58}, {&(0x7f0000000200)="420762bee27329cde1c058e4847654110a150c730cfba63421a1c6060dbd97ebf492b773bef514b9a68061ec561546c5261b67812049c27580c2e2526197b62c1583cab6bf00f577643ed4745f77", 0x4e}], 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="340000d301000000010000e3", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="340000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32], 0x80, 0x800}, 0x800) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000000)) 05:29:10 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'gre0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 367.426788][T11789] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 367.437640][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:29:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x5, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 05:29:10 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @local={0xfe, 0x80, [0x7]}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 05:29:10 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:10 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x27c, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x198, 0x198, 0x1e8, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x820}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', {0x3}}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x24, 'rpfilter\x00'}, {0x3}}, @common=@inet=@l2tp={{0x2c, 'l2tp\x00'}, {0x0, 0x0, 0x2, 0x0, 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x1e}, {0x24}}}}, 0x2dc) 05:29:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x0, 0x0, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) 05:29:10 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x42, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x34, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 05:29:10 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x4, 0x0, &(0x7f0000000040)=0xfffffffffffffdbc) 05:29:10 executing program 3: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x228000, 0x0) fgetxattr(r0, &(0x7f00000002c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff3ab2aa80002ec0f23349e620fed5d785568fa8f54d92fbe673c65fd764d65900000094000000000000000000ff020000000000"], 0x0) socket$inet(0x2, 0x3, 0x5) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r3 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x1a, 0x18, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5, 0x7]}) [ 368.175939][T11824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 05:29:11 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x224, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x190, 0x198, 0x198, 0x190, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @private=0xa010101, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x280) 05:29:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x3f}]}, 0x3c}}, 0x0) 05:29:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x6, 0x12, 0x0, 0x0, "0ed405a57b9534d511776c0079005c54f925f70b1034e87af62c5baf8a8deb7a77bbbca032f55624c9ee081d326d16720d46ab17dd05652378f0168b94c4f4dc", "627a1c39f67a0809a31f22671dd410c834bf7a2f3025dcd4f73c984633912252", [0x5]}) 05:29:11 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) shutdown(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, 0x0, 0x100000edc3) 05:29:11 executing program 1: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000408010100000000000000000000000514000480080001400040000008000140000000002c000480080001400000000108000140010000000800014000000008"], 0x80}}, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0x23, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 05:29:11 executing program 5: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffff9c, &(0x7f00000008c0)='/proc/slabinfo\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000900)=0x3, 0x4) r3 = dup(r1) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000180)='./file0\x00') r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdf9, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000ac92001c0000000000000000", @ANYRES32, @ANYBLOB="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"], 0x3c}}, 0x0) r6 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x74040, 0x0) getsockname$netlink(r6, &(0x7f00000001c0), &(0x7f0000000040)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x2, 0x3, 0x22c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3, 0x0, 'syz1\x00'}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'macvlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x288) [ 368.796257][ T32] audit: type=1400 audit(1595050151.527:21): avc: denied { write } for pid=11840 comm="syz-executor.0" path="socket:[36451]" dev="sockfs" ino=36451 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 368.807683][ C1] ===================================================== [ 368.828085][ C1] BUG: KMSAN: uninit-value in dccp_v4_rcv+0x411/0x2720 [ 368.834950][ C1] CPU: 1 PID: 11847 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 368.843618][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.853674][ C1] Call Trace: [ 368.856945][ C1] [ 368.859790][ C1] dump_stack+0x1df/0x240 [ 368.864110][ C1] kmsan_report+0xf7/0x1e0 [ 368.868518][ C1] __msan_warning+0x58/0xa0 [ 368.873024][ C1] dccp_v4_rcv+0x411/0x2720 [ 368.877523][ C1] ? ipv4_confirm+0x31f/0x3f0 [ 368.882186][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 368.887371][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 368.892559][ C1] ? local_bh_enable+0x40/0x40 [ 368.897308][ C1] ip_protocol_deliver_rcu+0x700/0xbc0 [ 368.902761][ C1] ip_local_deliver+0x62a/0x7c0 [ 368.907605][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 368.912620][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 368.918238][ C1] ip_rcv+0x6cf/0x750 [ 368.922212][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 368.926978][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 368.932671][ C1] process_backlog+0xfb5/0x14e0 [ 368.937514][ C1] ? lapic_next_event+0x6e/0xa0 [ 368.942481][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 368.947751][ C1] net_rx_action+0x746/0x1aa0 [ 368.952422][ C1] ? net_tx_action+0xc40/0xc40 [ 368.957170][ C1] __do_softirq+0x311/0x83d [ 368.961667][ C1] asm_call_on_stack+0x12/0x20 [ 368.966406][ C1] [ 368.969331][ C1] do_softirq_own_stack+0x7c/0xa0 [ 368.974340][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 368.979531][ C1] local_bh_enable+0x36/0x40 [ 368.984107][ C1] ip_finish_output2+0x1fee/0x24a0 [ 368.989205][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 368.995304][ C1] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 369.001282][ C1] __ip_finish_output+0xaa7/0xd80 [ 369.006302][ C1] ip_finish_output+0x166/0x410 [ 369.011143][ C1] ip_output+0x593/0x680 [ 369.015382][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 369.020651][ C1] ? ip_finish_output+0x410/0x410 [ 369.025662][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 369.030600][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.035793][ C1] ip_queue_xmit+0xcc/0xf0 [ 369.040197][ C1] ? dccp_v4_init_sock+0x150/0x150 [ 369.045294][ C1] dccp_transmit_skb+0x12ee/0x1600 [ 369.050404][ C1] dccp_xmit_packet+0x801/0x9b0 [ 369.055249][ C1] dccp_write_xmit+0x262/0x420 [ 369.060003][ C1] dccp_sendmsg+0x12d1/0x12e0 [ 369.064699][ C1] ? udp_cmsg_send+0x5d0/0x5d0 [ 369.069448][ C1] ? compat_dccp_getsockopt+0x190/0x190 [ 369.075087][ C1] inet_sendmsg+0x2d8/0x2e0 [ 369.079580][ C1] ? inet_send_prepare+0x600/0x600 [ 369.084675][ C1] kernel_sendmsg+0x384/0x440 [ 369.089345][ C1] sock_no_sendpage+0x235/0x300 [ 369.094278][ C1] ? sock_no_mmap+0x30/0x30 [ 369.098768][ C1] sock_sendpage+0x1e1/0x2c0 [ 369.103352][ C1] pipe_to_sendpage+0x38c/0x4c0 [ 369.108189][ C1] ? sock_fasync+0x250/0x250 [ 369.112774][ C1] __splice_from_pipe+0x565/0xf00 [ 369.117787][ C1] ? generic_splice_sendpage+0x2d0/0x2d0 [ 369.123440][ C1] generic_splice_sendpage+0x1d5/0x2d0 [ 369.128894][ C1] ? iter_file_splice_write+0x1800/0x1800 [ 369.134609][ C1] direct_splice_actor+0x1fd/0x580 [ 369.139710][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 369.144810][ C1] splice_direct_to_actor+0x6b2/0xf50 [ 369.150165][ C1] ? do_splice_direct+0x580/0x580 [ 369.155194][ C1] do_splice_direct+0x342/0x580 [ 369.160041][ C1] do_sendfile+0x101b/0x1d40 [ 369.164634][ C1] __se_compat_sys_sendfile+0x301/0x3c0 [ 369.170169][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.175352][ C1] ? __ia32_sys_sendfile64+0x70/0x70 [ 369.180622][ C1] __ia32_compat_sys_sendfile+0x56/0x70 [ 369.186156][ C1] __do_fast_syscall_32+0x2aa/0x400 [ 369.191349][ C1] do_fast_syscall_32+0x6b/0xd0 [ 369.196196][ C1] do_SYSENTER_32+0x73/0x90 [ 369.200687][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 369.206995][ C1] RIP: 0023:0xf7fe6549 [ 369.211042][ C1] Code: Bad RIP value. [ 369.215175][ C1] RSP: 002b:00000000f5de10cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 369.223610][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 369.231567][ C1] RDX: 0000000000000000 RSI: 000000000000edc3 RDI: 0000000000000000 [ 369.239523][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.247477][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 369.255434][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.263408][ C1] [ 369.265724][ C1] Uninit was stored to memory at: [ 369.270738][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 369.276443][ C1] __msan_chain_origin+0x50/0x90 [ 369.281362][ C1] dccp_invalid_packet+0xc59/0xee0 [ 369.286457][ C1] dccp_v4_rcv+0x50/0x2720 [ 369.290858][ C1] ip_protocol_deliver_rcu+0x700/0xbc0 [ 369.296300][ C1] ip_local_deliver+0x62a/0x7c0 [ 369.301132][ C1] ip_rcv+0x6cf/0x750 [ 369.305099][ C1] process_backlog+0xfb5/0x14e0 [ 369.309935][ C1] net_rx_action+0x746/0x1aa0 [ 369.314605][ C1] __do_softirq+0x311/0x83d [ 369.319085][ C1] [ 369.321393][ C1] Uninit was stored to memory at: [ 369.326402][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 369.332102][ C1] kmsan_memcpy_memmove_metadata+0x272/0x2e0 [ 369.338064][ C1] kmsan_memcpy_metadata+0xb/0x10 [ 369.343077][ C1] __msan_memcpy+0x43/0x50 [ 369.347478][ C1] _copy_from_iter_full+0xbfe/0x13b0 [ 369.352748][ C1] dccp_sendmsg+0x932/0x12e0 [ 369.357324][ C1] inet_sendmsg+0x2d8/0x2e0 [ 369.361905][ C1] kernel_sendmsg+0x384/0x440 [ 369.366563][ C1] sock_no_sendpage+0x235/0x300 [ 369.371396][ C1] sock_sendpage+0x1e1/0x2c0 [ 369.375971][ C1] pipe_to_sendpage+0x38c/0x4c0 [ 369.380805][ C1] __splice_from_pipe+0x565/0xf00 [ 369.385814][ C1] generic_splice_sendpage+0x1d5/0x2d0 [ 369.391257][ C1] direct_splice_actor+0x1fd/0x580 [ 369.396354][ C1] splice_direct_to_actor+0x6b2/0xf50 [ 369.401712][ C1] do_splice_direct+0x342/0x580 [ 369.406546][ C1] do_sendfile+0x101b/0x1d40 [ 369.411121][ C1] __se_compat_sys_sendfile+0x301/0x3c0 [ 369.416649][ C1] __ia32_compat_sys_sendfile+0x56/0x70 [ 369.422179][ C1] __do_fast_syscall_32+0x2aa/0x400 [ 369.427381][ C1] do_fast_syscall_32+0x6b/0xd0 [ 369.432222][ C1] do_SYSENTER_32+0x73/0x90 [ 369.436711][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 369.443018][ C1] [ 369.445333][ C1] Uninit was created at: [ 369.449563][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 369.455180][ C1] kmsan_alloc_page+0xb9/0x180 [ 369.459929][ C1] __alloc_pages_nodemask+0x56a2/0x5dc0 [ 369.465458][ C1] alloc_pages_current+0x672/0x990 [ 369.470554][ C1] push_pipe+0x605/0xb70 [ 369.474783][ C1] iov_iter_get_pages_alloc+0x18a9/0x21c0 [ 369.480494][ C1] do_splice_to+0x4fc/0x14f0 [ 369.485068][ C1] splice_direct_to_actor+0x45c/0xf50 [ 369.490423][ C1] do_splice_direct+0x342/0x580 [ 369.495262][ C1] do_sendfile+0x101b/0x1d40 [ 369.499833][ C1] __se_compat_sys_sendfile+0x301/0x3c0 [ 369.505361][ C1] __ia32_compat_sys_sendfile+0x56/0x70 [ 369.510892][ C1] __do_fast_syscall_32+0x2aa/0x400 [ 369.516082][ C1] do_fast_syscall_32+0x6b/0xd0 [ 369.520917][ C1] do_SYSENTER_32+0x73/0x90 [ 369.525403][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 369.531712][ C1] ===================================================== [ 369.538621][ C1] Disabling lock debugging due to kernel taint [ 369.544761][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 369.551342][ C1] CPU: 1 PID: 11847 Comm: syz-executor.0 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 369.561381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.571421][ C1] Call Trace: [ 369.576342][ C1] [ 369.579185][ C1] dump_stack+0x1df/0x240 [ 369.583507][ C1] panic+0x3d5/0xc3e [ 369.587403][ C1] kmsan_report+0x1df/0x1e0 [ 369.591898][ C1] __msan_warning+0x58/0xa0 [ 369.596387][ C1] dccp_v4_rcv+0x411/0x2720 [ 369.600886][ C1] ? ipv4_confirm+0x31f/0x3f0 [ 369.605549][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.610733][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.615918][ C1] ? local_bh_enable+0x40/0x40 [ 369.620666][ C1] ip_protocol_deliver_rcu+0x700/0xbc0 [ 369.626117][ C1] ip_local_deliver+0x62a/0x7c0 [ 369.630961][ C1] ? ip_local_deliver+0x7c0/0x7c0 [ 369.635971][ C1] ? ip_protocol_deliver_rcu+0xbc0/0xbc0 [ 369.641590][ C1] ip_rcv+0x6cf/0x750 [ 369.645564][ C1] ? ip_rcv_core+0x12c0/0x12c0 [ 369.650341][ C1] ? ip_local_deliver_finish+0x350/0x350 [ 369.655959][ C1] process_backlog+0xfb5/0x14e0 [ 369.660797][ C1] ? lapic_next_event+0x6e/0xa0 [ 369.665645][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 369.670918][ C1] net_rx_action+0x746/0x1aa0 [ 369.675590][ C1] ? net_tx_action+0xc40/0xc40 [ 369.680343][ C1] __do_softirq+0x311/0x83d [ 369.684841][ C1] asm_call_on_stack+0x12/0x20 [ 369.689583][ C1] [ 369.692513][ C1] do_softirq_own_stack+0x7c/0xa0 [ 369.697526][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 369.702713][ C1] local_bh_enable+0x36/0x40 [ 369.707290][ C1] ip_finish_output2+0x1fee/0x24a0 [ 369.712386][ C1] ? __msan_metadata_ptr_for_load_2+0x10/0x20 [ 369.718438][ C1] ? nf_ct_deliver_cached_events+0x511/0x6c0 [ 369.724418][ C1] __ip_finish_output+0xaa7/0xd80 [ 369.729436][ C1] ip_finish_output+0x166/0x410 [ 369.734278][ C1] ip_output+0x593/0x680 [ 369.738517][ C1] ? ip_mc_finish_output+0x6c0/0x6c0 [ 369.743876][ C1] ? ip_finish_output+0x410/0x410 [ 369.748906][ C1] __ip_queue_xmit+0x1b5c/0x21a0 [ 369.753845][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.759033][ C1] ip_queue_xmit+0xcc/0xf0 [ 369.763439][ C1] ? dccp_v4_init_sock+0x150/0x150 [ 369.768535][ C1] dccp_transmit_skb+0x12ee/0x1600 [ 369.773647][ C1] dccp_xmit_packet+0x801/0x9b0 [ 369.778492][ C1] dccp_write_xmit+0x262/0x420 [ 369.783246][ C1] dccp_sendmsg+0x12d1/0x12e0 [ 369.787922][ C1] ? udp_cmsg_send+0x5d0/0x5d0 [ 369.792670][ C1] ? compat_dccp_getsockopt+0x190/0x190 [ 369.798202][ C1] inet_sendmsg+0x2d8/0x2e0 [ 369.802697][ C1] ? inet_send_prepare+0x600/0x600 [ 369.807795][ C1] kernel_sendmsg+0x384/0x440 [ 369.812468][ C1] sock_no_sendpage+0x235/0x300 [ 369.817317][ C1] ? sock_no_mmap+0x30/0x30 [ 369.821807][ C1] sock_sendpage+0x1e1/0x2c0 [ 369.826392][ C1] pipe_to_sendpage+0x38c/0x4c0 [ 369.831230][ C1] ? sock_fasync+0x250/0x250 [ 369.835819][ C1] __splice_from_pipe+0x565/0xf00 [ 369.840831][ C1] ? generic_splice_sendpage+0x2d0/0x2d0 [ 369.846466][ C1] generic_splice_sendpage+0x1d5/0x2d0 [ 369.851923][ C1] ? iter_file_splice_write+0x1800/0x1800 [ 369.857629][ C1] direct_splice_actor+0x1fd/0x580 [ 369.862732][ C1] ? kmsan_get_metadata+0x4f/0x180 [ 369.867850][ C1] splice_direct_to_actor+0x6b2/0xf50 [ 369.873207][ C1] ? do_splice_direct+0x580/0x580 [ 369.878235][ C1] do_splice_direct+0x342/0x580 [ 369.883084][ C1] do_sendfile+0x101b/0x1d40 [ 369.887677][ C1] __se_compat_sys_sendfile+0x301/0x3c0 [ 369.893213][ C1] ? kmsan_get_metadata+0x11d/0x180 [ 369.898395][ C1] ? __ia32_sys_sendfile64+0x70/0x70 [ 369.903668][ C1] __ia32_compat_sys_sendfile+0x56/0x70 [ 369.909208][ C1] __do_fast_syscall_32+0x2aa/0x400 [ 369.914403][ C1] do_fast_syscall_32+0x6b/0xd0 [ 369.919246][ C1] do_SYSENTER_32+0x73/0x90 [ 369.923739][ C1] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 369.930137][ C1] RIP: 0023:0xf7fe6549 [ 369.934186][ C1] Code: Bad RIP value. [ 369.938236][ C1] RSP: 002b:00000000f5de10cc EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 369.946630][ C1] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 369.954596][ C1] RDX: 0000000000000000 RSI: 000000000000edc3 RDI: 0000000000000000 [ 369.962551][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 369.970505][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 369.978457][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 369.987694][ C1] Kernel Offset: 0x23800000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 369.999304][ C1] Rebooting in 86400 seconds..