x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x101}}}}]}]}, 0xbc8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x80000000004, 0x11, r0, 0x5abd8000) openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.mem_hardwall\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10) [ 729.232698] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:22 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xfffffffd) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2fff7f0000000000003000"], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='squashfs\x00', 0x0, &(0x7f0000000140)='%^posix_acl_accessGPL\x00') ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) 03:33:22 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x401) recvmsg(r0, &(0x7f0000000140)={0x0, 0x100000039, &(0x7f0000000000)=[{&(0x7f0000000380)=""/110, 0xffffffd9}], 0x1, 0x0, 0x4a, 0x59}, 0xffffffff00000000) dup(0xffffffffffffffff) 03:33:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 729.585317] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:23 executing program 0: shmget(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000440)=ANY=[], 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x2}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0x1}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000380)={0x10004, 0x7, 0x7b9, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x8, [], @value=0x9}}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000001c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') socket$pppoe(0x18, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffff83, 0x0, 0x0, 0xe, 0xf81db432f1cbb63a, "1c6c5cc5f637790030b56009ccad927f6d65094cf11d2396e216251b1539467f86173e2ddd0ce613f71c670ecae1a2b5d51aa1b8b565f009edea6146d7299565", "70b620216bac6ec7205970095d7f4f5d22da881a6393418f090adcfc9833751db6a8cf010632ce00f50e6b7a5d3c9a2269fcf93b4a6c36ee64c1f2db5b654bf2", "4ff2b7710ae28e8390c9f41a476cc808367adbb2912343150e31b31a97b897ba", [0x3ff, 0x1]}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) r5 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x8, 0x90c42) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000140)=0x3) unshare(0x40000000) 03:33:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000140)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0xfff, 0xffffffffffff7342, 0x2, 0x5, 0x8, [{0x20, 0x7, 0x322, [], 0xd07592b94fafee59}, {0x6, 0x6, 0x1, [], 0x80}, {0x4, 0x8, 0x6, [], 0x2000}, {0x100000001, 0x8de, 0x5, [], 0x80}, {0x5, 0xfffffffffffffff7, 0x7f}, {0x1, 0x80000000, 0x7, [], 0xc218ac9664da1620}, {0x1, 0x7, 0x5, [], 0x4}, {0x6ea4, 0x2, 0x0, [], 0x1600}]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$KDENABIO(r5, 0x4b36) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:33:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x32600) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff89d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) write$cgroup_int(r1, &(0x7f0000000400), 0xd) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) 03:33:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 729.889197] xt_CT: You must specify a L4 protocol and not use inversions on it [ 729.987211] IPVS: ftp: loaded support on port[0] = 21 03:33:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x6000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:23 executing program 4: r0 = getpid() chmod(&(0x7f0000000040)='./file0\x00', 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x0) pipe(&(0x7f0000000080)) creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) connect$netlink(r1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) 03:33:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:23 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040), 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x8, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040008) sendmsg$kcm(r0, &(0x7f0000000c40)={&(0x7f0000000240)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast]}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000500)="3c3174db0642cc61eefea679ee866efb8671bdc4be4c9b9766536251b8f4185ffdbe01de6ed2abbe963f8dccf88bc80a0bb82d3c153dc3802d80bbc42ff5f3915339df1c7f2997bc17329cd7ad6ae53a34ad12720db7295c050000005b011fb6117e2b3c8e2a05e83c3790c46f56992bbdceaf78f6dff6e102d13bc3a23953d9b27669f84fdfd8a7e9c7e607797c0841f57e6a059e647671f3449c7943348d18b563cbec402eb501c9442b7df54faecd6a815fb8673bcb78af", 0xb9}, {&(0x7f0000000300)="9bc51f7c87a84639bbd037ef6c392ee0320cabc1c7ab12e8852bb1dca2c047ab2eaab6d16e86d6c9fda70f6b3c9050866cf156ad191922da380c85244b05fd2ed66df37894531971a99ba5901af6dc8fc5a210f0ae", 0x55}, {&(0x7f00000005c0)="6831f71a72f105d1dde73791bff60fcc7fb7fcd09fb7f7f96f230fa9e24e195a1ba0d5cedb9468ca550bad47081564d20244d5dac0d9771f2c365c4c243230ae301e4f0d45621a7119f4d3fcaed6a93f8949788de7b6673ac6b6e2d9b79ac627f86022dc8355ff48098285a85159ea36e69beb7cdf62eb8c6b5e3890509f410a316ccdb104c0c0be459198bec26ceeceed1f731699f9b189f817607293f14503a717a512c8bf32e54b29cf539d2893e225293d8eb7ba", 0xb6}, {&(0x7f0000000d80)="121cf17857f52470b13817a8f1a98fabb213831bcbb41ee0af02c1dd2b4d0aaed1ce4ff073bb003dfc5360a059dd601f2bb2ab9707a5302ebd6488836a2aafcee12a862046ed906ef5fa0fa475be82b6b2279bc37c9de9a4ca6cc669cbd9775e955f217c9df1d4d14bda24fc2ed7238c1b70fc31b152b0ba28b13a3dbcb5520c70581cf059b52f4fe5a24739b8167d33bcf0997d990e36f1fc803d0cebdb08f788ef5a6e6c9a688b25e1dee04a08202fdf15df97b97834f9a41fb81c1122f8d3d28c90607e950074a91c18fc9b271b815ff08cc930bbc033c929e5e4a0976e282acc", 0xe2}, {&(0x7f0000000780)="defc85167b695f6bb10c8a17cd71f1be2ed32dad00e14a5983a23be4558d224da08ac21b0a3f60f37ef25535eccf67e24e4403485821df8ef8230cb4f308028a10710e5620f60679a5903f3ce984b2bc5ffc2ef2fe1ca4ccd6d2b0cdf91c2df7c00c6cfa3513f3bbc0c675ee5db22f677fa861a5e46649d25603000000ee47d565231456a70e86b07608211466cea75367ef7be0b617b44cb44414e3c98a16538b8abc3f4dfc3f3bea8cc000e8ec7009ca5ecaf476bc3d1647db1f43ad9f2dae4f7667e817f22e12bcb8f02f19ae517e381a1f88", 0xd4}, {&(0x7f0000000e80)="d84377443e88f72db01394d5cf72fa4d84db7703801a94a5c55098444a84dcf174ba5452deab15bff9deebdf82d76f48fe12b062fc277ba315146846fda36320c6a678c26df1407121e24f39a22c833749a18d24c08ca6e60b840100000000000000e9508ec53c6ea9ec81b1d1f95ce1a04c3eb5a573b575f053bd71f56cb9f0b8039da79faf7c76f7bf0713d404c7dbd7b122fb7f", 0x95}, {&(0x7f0000000940)="c1d9e536aa89edcd42d6a2d991dfd609248bf05999bd8c58f36202a2a2e58fb9fbf445d21717843ad4bb25d9f06457416353a4ebce41577191add470c78f6191bc84ba4821", 0xffffff09}, {&(0x7f00000009c0)="6aeab96eea8709325d9a3853c5041a32fb98fd8e47df701bcb97f440d4af5a688080bd08891b4d5050964c42520a65faacf2af6dfbd093b43bb9a88061cebc860ab0b603d7e8e85b9c0aee5af4a07ee691be9508f1ee10427828aecd2fd0e85fc0e35a230709", 0x66}, {&(0x7f0000000100)="7e9f8d27dc84ad28e7d557d74d883e84ece0cb5308a6955a427460b051ed257c0cf83142c69485c9670148411a8f6d2969204bdbb6defd790e74698272df", 0x3e}], 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x120}, 0x20000004) 03:33:23 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000240)=""/119) syz_mount_image$reiserfs(&(0x7f0000000b40)='reiserfs\x00', &(0x7f0000000b80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@nolargeio='nolargeio', 0x3d}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) mount$9p_unix(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x1400, &(0x7f0000000100)={'trans=unix,', {[{@noextend='noextend'}, {@version_9p2000='version=9p2000'}, {@msize={'msize', 0x3d, 0x65}}, {@cachetag={'cachetag', 0x3d, 'wlan0cpusettrusted'}}, {@access_user='access=user'}, {@loose='loose'}, {@nodevmap='nodevmap'}, {@access_user='access=user'}, {@cache_mmap='cache=mmap'}], [{@dont_measure='dont_measure'}, {@obj_user={'obj_user', 0x3d, 'nolargeio'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x40}}]}}) 03:33:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x1f}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:qemu_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) 03:33:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) connect$ax25(r2, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='map_files\x00') r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = dup3(r4, r5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r7, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r7, 0x9, 0x1bed34ee}, &(0x7f00000001c0)=0xc) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) 03:33:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 730.720567] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:24 executing program 2: perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x320c) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc00c5512, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080)}], 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xa, &(0x7f0000000100)}], 0x492492492492642, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000080)="7b8988d75aa1cd00d185d2562b0f85e5e0f1b1cdba1c45cf609a19a533137c4c69fa086750e204ad6e46261a2fa44fb9fa959dfc5b9c4a24450bd1c0fb3a48f214ca07a745fee97980ee6ad583dbb3d2ab3f9d5ae79bc253444b4edc71b3ff5c453be691fb22a102e40a952f912ea84d5f3408b2883fb2ef58a4ed1773ff4e4d1afda97989ce5a2a4fbe5adabb84899a007c8d0f", 0x94, r2) keyctl$clear(0x7, r2) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000240)={0x1, 0x1000000, "3d04a05ee6f55ed82f0482dd97475e09583bb1f6b63811fd", {0xfff}, 0x4f7b}) unshare(0x40000000) prctl$PR_GET_FPEMU(0x9, &(0x7f00000000c0)) [ 730.792678] input: syz1 as /devices/virtual/input/input7 [ 730.841478] input: failed to attach handler leds to device input7, error: -6 03:33:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xa000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:24 executing program 0: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xe, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x24) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket(0x22, 0x2, 0x2) bind$isdn_base(r2, &(0x7f0000001140), 0x6) r3 = socket(0xd5fdec7c1c22a7f6, 0x800, 0x81) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x2, 0x7, @ipv4={[], [], @remote}}}, 0x24) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="7be1f71eb14098f1d51ec25315afb9db685a010074b146c632342c8ffdac79b40d25a12603b26ef0c2e1bb14040200000016416af3060000000000000012a8d1e0e0b678465121aa13662e9e75b21bbc0a27cbbe645d22e966c35375b0045ff5f04cae573487b380c01f463ca7639042eae34804ef2e89afc5b105074c1865dbb1c82617942c5814bc1bb52239e193b40397c69dc40b16e3ff8cbdf95fa4eb48357ef84b282c000000000000000000000000000056eb9bed649de98cc02c1215152711f8be29d1defd52fdafb9d27902d6506637f75d913f9d0b9ee471a8e6e1aefcbe51f90edb42520664c3b2"]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) fcntl$dupfd(r4, 0x0, r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r5, r6, &(0x7f0000000100), 0xe0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x80184153, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, 0x0) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f0000000200)={0x10000, 0x5, 0x49b7}) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) recvfrom$inet(r4, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) 03:33:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) wait4(0x0, 0x0, 0x80000002, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x501000, 0x0) time(&(0x7f0000000040)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b04000000007f0000010000"], 0x1d}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000f80)={0x0, 0x962c}) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 731.014865] input: syz1 as /devices/virtual/input/input8 [ 731.021048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.092422] input: failed to attach handler leds to device input8, error: -6 [ 731.094493] IPVS: ftp: loaded support on port[0] = 21 03:33:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 731.151038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:33:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xb000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 731.202885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:33:24 executing program 4: msgsnd(0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x4) [ 731.296248] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:24 executing program 3: perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/mls\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r1, 0x0, 0x0) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000200)={0x700, r1, 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000640)={0x0, 0x80000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cgroup.controllers\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x2) readv(r5, &(0x7f00000000c0), 0x0) dup3(r5, r3, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000003c0)) r6 = syz_open_pts(0xffffffffffffffff, 0xa96100) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x14) readv(r6, &(0x7f00000000c0)=[{0x0}], 0x1) dup3(r6, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r6, 0x540a, 0x3) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000280)=0xf000, &(0x7f0000000300)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) io_setup(0x0, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20730, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) 03:33:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xc000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:24 executing program 4: syz_open_dev$binderN(&(0x7f0000000680)='/dev/binder#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="e851064e8e56f02fd4a6e9d47351b48268378bb0e29304bbafe4f86b59b51866b1d6ad4877be54828295ccbf346c4662d6812fe36fe0261ec88acefa1f3aac79d89d51d7d32555"], 0x10, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket(0x40000000015, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 03:33:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 731.552604] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xffffffffffffff8c, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x7b, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0xffffff4c, 0x11}]}, 0x30}}, 0x0) r1 = socket(0x1c, 0x0, 0x52) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x44000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x400, 0x70bd2b, 0x25dfdbfc, {0x80, 0x0, 0x80, 0x0, 0x2, 0x3, 0x0, 0x7, 0x400}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 03:33:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xe000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008914, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket(0x22, 0x2, 0x2) bind$isdn_base(r2, &(0x7f0000001140), 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240)={0x3, 'vlan0\x00', {0x40}, 0xcb}) getsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000000200)) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300fdff000000800000f28600"], 0x6) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4) 03:33:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xf000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, @gtp={{0x8, 0x1, 'gtp\x00'}, {0x14, 0x2, [{{0x8}, {0x8}}]}}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcsa\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000700)={0x49}, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x22, 0x2, 0x2) bind$isdn_base(r9, &(0x7f0000001140), 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x30, r11, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0xf}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd97}]}, 0x9a}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r9, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r11, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x300000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x10080) 03:33:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xcc000000, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad22780648c6394fb0224fc0010000b400c000200053582c137153e3709000880feff0000d1bd", 0x2e}], 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2e381, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000002c0)=0xe8) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) statx(r5, &(0x7f0000000300)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8800008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@ipv6_newroute={0x50, 0x18, 0x20, 0x70bd26, 0x25dfdbfc, {0xa, 0x10, 0x80, 0x48, 0xfe, 0x4, 0xfd, 0x6, 0x2000}, [@RTA_UID={0x8, 0x19, r2}, @RTA_PRIORITY={0x8, 0x6, 0x2d}, @RTA_MARK={0x8, 0x10, 0x6}, @RTA_UID={0x8, 0x19, r4}, @RTA_UID={0x8, 0x19, r6}, @RTA_METRICS={0xc, 0x8, "9fad908949edaa1b"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) [ 732.047160] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 732.085859] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 732.106875] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 732.129812] protocol 88fb is buggy, dev hsr_slave_0 [ 732.134961] protocol 88fb is buggy, dev hsr_slave_1 03:33:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 732.150371] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:33:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x480041, 0x0) r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = dup3(r3, r4, 0x0) r6 = socket(0x22, 0x2, 0x2) bind$isdn_base(r6, &(0x7f0000001140), 0x6) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$KDGKBMETA(r5, 0x4b62, 0x0) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x24}}, 0x0) r8 = socket(0x22, 0x2, 0x2) bind$isdn_base(r8, &(0x7f0000001140), 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r10, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x8, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r10, 0xf9b66c7c92dc2f99, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x12, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040082}, 0x44800) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x128, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xc8, 0x8, [{0x34, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4080bf4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d341be4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f0b401c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}]}, {0x2c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21e022a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72b22ea5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}]}, {0x1c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x34, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3baa5d2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c4bc5df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6932850}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, [{0x5, 0x3, 0xc498b29b7c3d3431}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0xed2fd704e16b53c9}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0x48000}, 0x44041) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 03:33:25 executing program 0: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x793fffffffffe, 0x400000000000000}, 0x1010, 0x0, 0x80000, 0xc, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fca9aa2fd2e378e81e919c46e2abfbfade60000000065f5ab899792287d4e3fe056514440d29af2e89cd9950705120f6ded396627bb8646172d3b0bd7b09be49bb2e1db2935ead125383cfe184128c0c53949b8ccb15f82591070f577a078aac4a9fe1b8d191c0a0200"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x618) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) socket$inet(0x2, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000002c0), 0xfffffe50) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close(r2) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 03:33:25 executing program 2: getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0x800, 0x9, 0x4, 0x400, 0x3, {}, {0x5, 0x8, 0x0, 0x6, 0xf9, 0x0, "63a788cd"}, 0x8, 0x4, @planes=&(0x7f0000000080)={0x0, 0x80000001, @userptr=0x6, 0xff}, 0xcb1, 0x0, r0}) write$selinux_load(r1, &(0x7f00000000c0)={0xf97cff8c, 0x8, 'SE Linux', "b16c093de06b24f5960c8264c2be019387cb998cd70cf0cc3772be4d5b2d134e1a11"}, 0x32) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000d40)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_buf(r4, 0x0, 0x30, &(0x7f0000001580)="906f4158c1ab790102fc476d5e23dab5ae3930576caf48650cff6d4e49ee59a24b43d7f1ffe4b84f42ff6942ec622cd60b07d4f57d6161233454ee4754708c8784edfcb031adce70f17dfbbe2d7795d9", 0x50) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) r7 = socket$inet_sctp(0x2, 0x4, 0x84) getsockname(r7, &(0x7f0000000640)=@phonet, &(0x7f00000003c0)=0x80) write$P9_RSTATu(r1, &(0x7f00000005c0)={0x67, 0x7d, 0x2, {{0x0, 0x4d, 0x0, 0x20, {0x48, 0x1, 0x7}, 0x40000000, 0x9, 0x8, 0x6, 0x8, 'SE Linux', 0x5, 'aead\x00', 0xd, 'securitywlan0'}, 0x5, 'aead\x00', r2, r3, r6}}, 0x67) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r9 = accept4$alg(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r10, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r9, &(0x7f0000000340), 0xfdef}]) r11 = socket$alg(0x26, 0x5, 0x0) sendmmsg$sock(r9, &(0x7f0000001700)=[{{&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x2, 0x3, 0x2, 0x2, {0xa, 0x4e21, 0x71, @loopback, 0x2000}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000500)="61a5e3d2688fb3dd7a8453194890de3b46e4ccc5b54e3a3f645a0d6666c46dee90870c2554a3ae58e5dc65fa9e6c1125cd80c9ea4b0600124f72db3b20a6171cd7c3a43b0c5b756fd75c351b8ff798a659f4dcf639eb0d00cdcc41ad2a7996959e00"/125, 0x7d}, {&(0x7f0000000340)="815e17d4266d45535dcb209cf8b8d66da44a9276cc8c", 0x16}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000000580)="7cbb6703c516ed15b2a7f639b0aaa3a02d71553e52bd51d9e54acb3f68991081c3edc36cb7ae69578157192598251495181a", 0x32}, {&(0x7f0000000100)="de1ee29290460407142cc90ea216e5891d", 0x11}, {&(0x7f0000001880)="6775f2b76f33f11896e6e7a2f6ad4306e2363e22d943431b4e6791b98526edae183059594e9776652c3f1b05231cafec30b976db772160c30f3a9503e7d110889bcecda9fcc836f5391a1e84cff8295b7208f440760815babaae77b8158e05131204c212934e5b59131958f5a6b53dd77a44d5a8d995562f7a538b54e0d8b447d3984c0781d205311b2e14abcc66ab81069efb5d23f5c0de081cb20126825d3ca4e063bb264d5665e47a99df992ec51202b64aae54d55a8affe782c73d077002bbb6851966725a514c8d9c3ab9254a312a2a97728822d8bcab813489c120c9c8f39bb9a2464f9479f3ed3c9483d531f77787f6e4f2af0250c9", 0xf9}, {&(0x7f0000000640)}, {&(0x7f00000007c0)="af351fc381bf848c6140075e8393c9eb999c842a173dabd15af55d82cd1c2ad43adffcec998891bde0a5cf0fa8887f7dc253aabce2c9af03d214fc5867c841e98f0948ec845a31870dca53eaa1b7ff3e48f5d0cb76d0dbc871b9c69ea4b7a6be2a2e8c6b21aacb531506f4017ee1d488124b78feb8e741fe54745775b67ac29fe565b2bdb2b5ce27ac057fc6486ef361a1c22665a7de2b17d92f4d0903cd9e090c86214cb42fc5dddc7124daf3461efdcc95cf5b7e394f6dc2fec5d1dd44cfbde048bd0d82fa9a7623c1ad", 0xcb}], 0x8, &(0x7f0000000940)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x800}}, @timestamping={{0x14, 0x1, 0x25, 0xacd}}], 0xa8}}, {{&(0x7f0000000a00)=@nl=@kern={0x10, 0x0, 0x0, 0xa0562b1aaa951e4f}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000a80)="b31f9e549463e90901f2", 0xa}], 0x1, &(0x7f0000000b00)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x8001}}, @txtime={{0x18, 0x1, 0x3d, 0xe83a}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x7e1ab96d}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x53}}], 0xc0}}, {{&(0x7f0000000bc0)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c40)="8a02d0e4a995b36e59b8beceb3d081b46040131588be12ef2517e45c76709944bc04640fe4a08a38ab977b39acf59c9ce229810025446e534d9ab397f6a1c841f8172852a4c2e44e34891b7ec379a8162b6c4930874a33adafecfac0a9c0f01ac5028a08769dbe1f66eb5a37dad28446c6f50378bbfab2af0528d5c0218d85daf464af3c1f9dd8d602be473d8f021c3d1ac63f48675dbb", 0x97}, {&(0x7f0000000d00)="96cc8c4e8075bc2589fe5a8f789fb679a966f4017b7758849c23c6706681fd67efc47eb75089376067d6", 0x2a}, {0x0}], 0x3, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x6fb}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x78}}, {{&(0x7f0000000e80)=@rc={0x1f, {0x0, 0x9, 0x9, 0xf8, 0x8, 0x85}, 0xe0}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f00)="27bf356938d344b7d86bda539e48b3a3ee79a27d4903663e0143efb79b1293bd6111b19d716aac78b3b62d89215fb584ef1d2e14ee279d1ac9561b4bb5b10550c74a0a2d0c29c33b12f3772d3b97811d058913aa4c4d0a8c810838aafd3b9e7b4b87aac3bf5bc016911e1d60e78942ab85ba37c55e58df6067acb91c83c81241db0a5032af65e431c6adb10323d620c55bf64f1d891ef5f8184cfb9845c852c119b32d6bdb1755652dd4c4f81babeea7a4cb3a8363e5ad0258899e1756a32fa6221dc8b5170dd97dfcae80b6195dff7e285371217f363b76958665a2b134ff0374a221833bb3c94551db1711a7ae1f8bd6d5f3fec8a7555b", 0xf8}, {&(0x7f0000001000)="5b1b41461f3d8d6a1307ad8d33d5eee40ec5c9db90b61e981457cd6129ed42c35f980065e93cc20507ca4ee6e379ef47aa0ff70d064e3954932d79d8fa9cdd6efa691ce6bef756e73fc56d6d18ff99e93a21ce8bc4b34438960d6c9a3eaadbea847cddae4a04c512509594f7a5f7c96327f8b325592f098551c38f4d19d010ecb2186ba647bd9f52bc8e9d864991f28586597f6a0d6d70ca2b24792e0a6c131c00b692e845cf9346447ff773db7438fb42fc280db5a9e3349bf188f4442a791813de6b22838b0c9b4614d944c1e5bb", 0xcf}, {&(0x7f0000001100)="82f147be8b7bc0b4c8d1b2e0", 0xc}, {&(0x7f0000001140)="f45451f26fbe95230da55b7c60cd12f7ac138c19751b8636dfa4ef7ab84c2eb49631f64fcfaad88f4293889f29c4afda999b76d0d4c5c17940eecfe29ae2519a4951b4b83572b2f641046b7ba4e0d7b98626e45bd7985a6cc811277b86d63cef9af2f9fbe57ade80a933d42fc719fc1080be6bdc9e098db0226490eda356a1e462e003f4fc8688ef6e7847eddcf28e8e72f5802c93072b5151d884af41095d20880a64c2cb99b5fd047abcd73a30c570a1359abb35e53c6d85e4b8d2fe42f8d54ea489981a", 0xc5}], 0x4}}, {{&(0x7f0000001280)=@sco={0x1f, {0x4, 0x1, 0x5, 0x3, 0x80}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)="2d10a6552bb3bcc39898a2e8e1e3ebfcadc0926044aece161116d323f72470ac876179d5d6b7a7ac21eba46f7c8eb48d3b59a1f4c22820d4116041f8f48c70eb64b368e896643bd55861", 0x4a}], 0x1, &(0x7f00000013c0)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x8ff}}, @mark={{0x14, 0x1, 0x24, 0xcea8}}, @mark={{0x14, 0x1, 0x24, 0xd0}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3fd}}, @timestamping={{0x14, 0x1, 0x25, 0x80000005}}, @mark={{0x14, 0x1, 0x24, 0x3ff}}], 0xc0}}, {{&(0x7f0000001480)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001500)="c6dea96a081c945daf9765dc876467ae3d70ba12959ae0bdd0a2342fa052278fd7debcef980ff69f37bcfd9e88b36c189610b3fb202de376dd7459b4a82a2e8d88f491111d2402dbf3fcb86be87d19a4d9", 0x51}], 0x1, &(0x7f0000001680)=[@txtime={{0x18}}], 0x18}}], 0x6, 0x904) [ 732.275559] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 732.290736] netlink: 'syz-executor.4': attribute type 6 has an invalid length. 03:33:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x20000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:25 executing program 4: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe}, 0x80, &(0x7f0000000240)=[{&(0x7f00000006c0)="0a087c2f61ca719b8db3081f45febb7f98cbe5a1dca5aa727fdf0785e695f3cf6be4faae4e3d41866d821bac81996307279a6a5de14fb52a12e8c04576695c9b0b87ccca4b84b393b7993c23778e580149e2e786171c097a8e470e698e925fb1e7433f894e3273ae729abf15a23160f9993b2e3aaf5640ba43ef81f52e5e33d37831233d9b0552b7805176ff94ab707f6da66a1f485d96b9bb6e02496720991b1649658782fd78df4239ba141fca5cb41a1b1d634a9366d71864dcc590dc7c9c76aad54f15a3c23cf459308612", 0xcd}, {&(0x7f0000000900)="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", 0x1000}], 0x2, &(0x7f00000002c0)=[{0x70, 0x3a, 0x7, "308265bbed51c264bba275d6dd2b4d84065522c406a4e276fa12e87e7f449ee792edba5e17ef8277990fae4540d420dcb8029ae9b76e4aba013a3db36bd24b356f21c42622b4b7a10b9dc2171837c20949d6ea55865bbe0e3ef7687baacba48a"}, {0x30, 0x6b30e1de237c651e, 0x7fffffff, "77528337a692445632bf376c686c3c760fff8259e58f32dbb31e"}], 0xa0}, 0x40) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x4521, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000440)={0x7, [[0x7fffffff, 0xabed, 0x6, 0x2, 0x5, 0x1000, 0x80000001, 0x1], [0x400, 0xfffffe01, 0x745, 0x9, 0x2, 0x80000000, 0x8, 0x9], [0x3, 0x6, 0xff, 0x3, 0x2, 0x7, 0x3, 0x5]], [], [{0x2, 0x8, 0x0, 0x1}, {0x9, 0xfffffffc, 0x1, 0x0, 0x1, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0x8, 0x10000, 0x1, 0x0, 0x0, 0x1}, {0xfffff001, 0x908, 0x0, 0x1, 0x1}, {0xb29}, {0x0, 0xfffffff7, 0x1, 0x0, 0x1}, {0x101, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x400, 0xfb, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {0x8, 0x20, 0x1}, {0xff, 0x1, 0x1}], [], 0xff}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f000001b000/0x3000)=nil, &(0x7f000001e000/0x3000)=nil, 0x3000, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 03:33:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 732.480799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:25 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x0, 0x0) read$dsp(r0, &(0x7f00000024c0)=""/126, 0xffffffffffffff4f) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) [ 732.542799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 732.579338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:33:26 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0xe, 0x0, &(0x7f000034f000)=0xfffffffffffffeff) socket$vsock_dgram(0x28, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) dup3(0xffffffffffffffff, r4, 0x0) [ 732.769600] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:33:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x38000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 732.920575] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:26 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7, r1, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0xff, 0x400}, 0x10}, 0x78) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x9, 0x6, 0xaae}, &(0x7f0000000300)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffffc}}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x2c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff51, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x441, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000c) [ 732.987921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 733.012222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 733.053173] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 03:33:26 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x102d0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000c09456000a000200090ada1b40d805000500c50083b8", 0x2e}], 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40000, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000340)={0x14, 0x13, 0x2, {0x8, 0x4, 0x2}}, 0x14) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e21, 0x100, @remote, 0x7e9e}}, [0xfff, 0x8e, 0x400, 0x96cf, 0x6, 0x8001, 0x7f, 0x8, 0x80000000, 0x3, 0x4685b849, 0x1000, 0x5, 0x2, 0x7]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r6, 0xa4, "630aa22afaf464460c80e98535188f2bfd5865ec1075cf3c7bf7438d8e80049f5a2b63cb0f60cfbccce869a8bbf1d0f266e0412b5ed5c1c5d8a455f1db34b72263f0e20706bd3448364455af19edc5220a7a7a7d9abca00816e4dad3d8e5dd7d33acf3622f7ee0fbbc0c360097c54869b88d76c433b1d789cec2c29934fd2aafc6177adfc5bc2de3a0399b91dd9ad9a2b43ecf9d172261c5b91b520c85a8671a117bfc88"}, &(0x7f00000002c0)=0xac) 03:33:26 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2000, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xc1, &(0x7f0000000080)=""/43, &(0x7f00000000c0)=0x2b) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) 03:33:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3f000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:26 executing program 0: open(&(0x7f0000000080)='./file0\x00', 0x8c7, 0x0) lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="000000000100000006aa748e5a8b2f08b753f30667091fc1fb621bc34f567486b809d4b3f4fad6d2f4e366b9a4822f189b319a09d4968e93cedad02fd9ca49b2b5d2314beed2643775b494"], 0x1, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x401, @bcast, @netrom={'nr', 0x0}, 0x4, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "8f7c011529b28a1dd550c32e3aec61c6"}, 0x11, 0x1) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) fchmod(r1, 0x80) 03:33:26 executing program 2: perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000040)) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000280)=0x9, &(0x7f00000002c0)=0x4) socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fbc310de9a5df00a0000003450b64b000400000008000c00e634a53b6414bd142fa6e82b463a280204449b4d2b0b7776672e20cdae34f3d5f7a7e6277530f4809d6559"], 0xfffffffffffffd9f}}, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 03:33:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getuid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404110001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad184fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e702bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27ad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210f0700000000000000044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b726956d50b22bd2491331818a10f2ac8c3249582a20d1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee452e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd644b4a44b807c9765cc7ef43c3cc0a6ad3d3976656d475dd2ed789004be03884e042acb104431333b50ff695516c1dd2e35f09c7a1f97f9561f62837e1d38eab98e6a7285bb0c6c190b9abc4b5705eb1073fe63e88f6ff510c2795288a69aa52ff32a89c9bd496d5d61d02cd952aa6228a3098ec9215fcf5becbfd7b53b4c65b74873ae66ba6d7376bc7354c34039c0421740677d2e4fddccb3cc2b76d1f5da2ee40ebc8e6f76ea27ff15a1307197a88a353219c76dc36dbf9a7b35044cd895e7366313267a839711c79c4b2c82541cb89ca5ca29f23c96a72cdf378947a81d0183c095a783c7d617d86aacb8da67bcb20de970c54da1bbc4e3b48351d3e19eb95244823039abeda6864d952e23491801c6dfe846c91f0618c4a71ec892e348c34b0580eec3013baec1ae8ba6c06361f00000000000000104b1b55bd9f6a073a04a0fd4c50c3e2d3bdedf79ae80df43cbc0fc5178f6874cc6c0a66643a9b333cb603dec214eed2945649aa229aa2028ed26e6e42e60c962b571412c4e350fa3890928e1492d0dcb117a8b4463a94c1e9ca801cae9322b964bff1f1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x401}, 0x8) [ 733.595305] xt_ct_set_helper: 3 callbacks suppressed [ 733.595312] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x60000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:27 executing program 0: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="04696d3d", @ANYRESHEX, @ANYBLOB='\x00\x00']) 03:33:27 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x82b}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x528500, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r2 = socket(0x22, 0x2, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000040), &(0x7f0000000100)=0x68) bind$isdn_base(r2, &(0x7f0000001140), 0x6) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @mcast1, 0x20, 0x2}, 0x20) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x100000e, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, &(0x7f0000000280)=0x8) write$FUSE_INTERRUPT(r1, &(0x7f00000002c0)={0x10, 0xfffffffffffffffe, 0x4}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001180)={r5, 0x8000, 0x1000, "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"}, 0x1008) 03:33:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x65580000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 733.894031] jfs: Unrecognized mount option "im=0xffffffffffffffff" or missing value 03:33:27 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) getuid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404110001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad184fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e702bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27ad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210f0700000000000000044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b726956d50b22bd2491331818a10f2ac8c3249582a20d1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee452e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd644b4a44b807c9765cc7ef43c3cc0a6ad3d3976656d475dd2ed789004be03884e042acb104431333b50ff695516c1dd2e35f09c7a1f97f9561f62837e1d38eab98e6a7285bb0c6c190b9abc4b5705eb1073fe63e88f6ff510c2795288a69aa52ff32a89c9bd496d5d61d02cd952aa6228a3098ec9215fcf5becbfd7b53b4c65b74873ae66ba6d7376bc7354c34039c0421740677d2e4fddccb3cc2b76d1f5da2ee40ebc8e6f76ea27ff15a1307197a88a353219c76dc36dbf9a7b35044cd895e7366313267a839711c79c4b2c82541cb89ca5ca29f23c96a72cdf378947a81d0183c095a783c7d617d86aacb8da67bcb20de970c54da1bbc4e3b48351d3e19eb95244823039abeda6864d952e23491801c6dfe846c91f0618c4a71ec892e348c34b0580eec3013baec1ae8ba6c06361f00000000000000104b1b55bd9f6a073a04a0fd4c50c3e2d3bdedf79ae80df43cbc0fc5178f6874cc6c0a66643a9b333cb603dec214eed2945649aa229aa2028ed26e6e42e60c962b571412c4e350fa3890928e1492d0dcb117a8b4463a94c1e9ca801cae9322b964bff1f1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x1800000000000060, 0xe80, 0xfffffffffffffe64, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000000000ffff81", 0x0, 0x100, 0xf2ffffff, 0xfffffe0c, 0x212, &(0x7f0000000280)="f2a134bd13c7bd41a2a738ad8e7625ed330eb46063bd287d832698132e59ef45f8f50845c0ac85604b448e24348e4ae93e68238b7b9d561b349d19b5f5784e031c55c5a4e48926a1526e38640a161fab39732052ee83bc3b9cb625962f3eaf1ed426e6f0442693c16b0ab6a89a5738f5bccd6ae1492f8471a7afec6b", &(0x7f0000000380)="712ae01ebf877f139c8f1b0fcd056310bfa3de7157976d3ff4c82f2e0d1885774c5b7c7c853e5424fbf469ab0726e9f41208f98d20b093ddbb7f52e015b875cea2900b2443348cdf466c18cfae89ce96f0437cb21ca3703f0b94273c7500"/106}, 0x28) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000300)=0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r6, 0x401}, 0x8) [ 733.957734] jfs: Unrecognized mount option "im=0xffffffffffffffff" or missing value 03:33:27 executing program 2: r0 = socket(0x1e, 0x801, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db505bfb6444009c6b347f69909e99e035e44697071") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x1ce, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000010407051dfffd946fa2830025200a8009000100041d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:33:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = memfd_create(&(0x7f0000000200)='securigy\x1c\xea\xf2>/\xc2\xe4\x8a\x8fu\xbf\xca\xa4Y\x9c\x0eo\xd5\n\xd4\x7f:n\x13\xc0\xeb\xeb\x14o\xc35\x19\xda\\\f\xcan\x1d2^\xcaR!\x04\x82G7\x9a\x80\x02\xd8\x96\xa8\nVm.\xc7n\\%\x8b\x809\x83W\x05\x80\x0fNid9\xac\xd0\xb8SP\xb7c\xe1\xd2\x00uL\xfdX\x93DF\xd2\x97T\x93\xef\xa3\")\xd1?\x18pk\x90A\xf1\xcd\x9e\xc5\xf6\xd5\xb7>\x98\x7f57\x9b\x0eA\x99\xcd', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r0, 0x0) symlink(&(0x7f0000000340)='./file1\x00', &(0x7f00000003c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file0\x00') 03:33:27 executing program 3: r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x101000) r1 = socket(0x22, 0x2, 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvfrom$rose(r2, &(0x7f0000000140)=""/29, 0x1d, 0x40002062, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) bind$isdn_base(r1, &(0x7f0000001140), 0x6) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000240)=ANY=[], 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2000000000000, 0x70, &(0x7f00000000c0)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}, {&(0x7f00000008c0)="8982871eb2a88cc508d4aad6c53ff3a4071bc6547cc7f8c0d22c69b6ccf65e06980097a91449883a3bfe283ccbe0d9d8c98de150f0c7a9b1648674bf0ecf66d9e38997de243719a024affc373b7ab7d75686356987f3f7e55131dc4b10a2aca00c2a2daa076f88628dd0d2c889d7416841e76c1ded6910eb41333b230e8f8961663b946bf88f9d43a99ad83a9724d0ddfca41530af618b744788ff51069a4cca5c7b427804f15a2e154d52a72d2aa2a01233d634d6cf8d64fd4944280540a19e7ac5c4df6f280502d286e2fa50da6b9c342afec4e857289684efd4bb", 0xdc, 0x2}], 0x2, 0x0) 03:33:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x81000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 734.252123] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 734.266233] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:27 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0x3b85e8d8c0652113, 0x322f, 0x94, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9909e5, 0x0, [], @p_u16=0x0}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 03:33:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x88a8ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:27 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000014c0)) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) r2 = socket$nl_route(0x10, 0x3, 0x0) lseek(r2, 0x800002, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x3, @loopback, 0x3f}}, 0x0, 0x0, 0xd, 0x0, "34c974fcd879de6cfd6336c7246b21d2d5382c83acdc3f53d6b47b46d1cf789f424d129e38faf369fa37546b69b543bad1ef27f177985dbe3f38b715a7dc7d2e8a5c446b8d49f9f3500bda538e594db0"}, 0x26) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x208200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r3, 0x4010ae74, &(0x7f0000000140)={0xffffff89, 0xfffff800, 0xa5e}) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000100)) 03:33:27 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:33:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9effffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 734.698597] audit: type=1804 audit(2000000008.040:114): pid=15803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir624693801/syzkaller.QCncjC/801/bus" dev="sda1" ino=16563 res=1 03:33:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x400400, 0x311fd399750005bb) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='\t', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x44f, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="02006800000f000000000005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x16f, 0x1a0}]) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 734.879993] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:28 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:33:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xcb040000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:28 executing program 4: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80900, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'veth1_vlan\x00', 0x1}, 0x18) r3 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000005c0)='/dev/snapshot\x00'}, 0x30) syz_open_procfs(r4, &(0x7f00000001c0)='net/ipv6_route\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r11 = socket$netlink(0x10, 0x3, 0xc) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r12 = socket(0x22, 0x2, 0x2) bind$isdn_base(r12, &(0x7f0000001140), 0x6) write$binfmt_elf64(r7, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="54f57b71008d42", @ANYBLOB]], @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r12, @ANYRES64=r3], 0x43) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f00000000c0)={0x20}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r14, 0x660c) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r15 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r15, 0x0, 0x7fff) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) close(r5) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x840c) 03:33:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xf0ffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 735.505835] audit: type=1800 audit(2000000008.860:115): pid=15767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16532 res=0 03:33:29 executing program 3: semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0x0, 0x0, 0xf0, 0xf0, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@inet=@l2tp={{0x30, 'l2tp\x00'}, {0x0, 0x0, 0x0, 0x0, 0x33}}, @common=@ah={{0x30, 'ah\x00'}, {[], 0x1}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x800, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') socket$inet(0x2, 0x5, 0x9) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) write$FUSE_GETXATTR(r5, &(0x7f0000000380)={0x18, 0x0, 0x5, {0x5}}, 0x18) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8) 03:33:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:29 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x1000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:33:29 executing program 0: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={r0, r1+30000000}) socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x420040, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x365) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x20, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r6}]]}}}]}, 0x48}, 0x1, 0x3e0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=0x0, @ANYBLOB="87a000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="20001200100001006970366772657461700000000c00020008000100", @ANYRES32=0x0, @ANYBLOB="768d947ddb4b175a3d1efbc604e0b7d15bd8208689ea54576e75a25a904e1cf2794b7d779f3696e967e5ec7dca559438eae107fb3e335c6acd5fa70a32e4da63f4771c996331c22f9245cd48cd8b5c401965926bbb09967c5771bb92e20bedc7449172087302f11d6abbce3f79e9e2f49eb1dfecab1692"], 0x48}, 0x1, 0x3e0}, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) sendfile(r10, r9, 0x0, 0x35) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x400, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) sendfile(r12, r11, &(0x7f0000000100)=0x3c, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) sendfile(r14, r13, &(0x7f0000000100)=0x3c, 0x35) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x3e0}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r16, 0x0, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x4000000) getsockname$packet(r20, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3e0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f00000009c0)={0x14c, 0x0, 0xc01, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x130, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xf39}}, {0x8, 0x6, r18}}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r21 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r22 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x2, 0xffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r23}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f000000bdc0)={r22, 0xffffffffffffffff, 0x0, 0x16, &(0x7f000000bd80)='trusted.overlay.upper\x00', r23}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000600)='nodevusertrusted[GPLwlan0\x00', r23}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)='team\x00', r23}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r24, r11, 0x0, 0xe, &(0x7f00000005c0)='/dev/snapshot\x00'}, 0x30) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) r25 = getpid() sched_setscheduler(r25, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 03:33:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfcffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffa888]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 735.775150] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x10201, 0x1, 0x4fda2d3c5624ded9, 0x1000, &(0x7f0000ff2000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 735.820308] xt_l2tp: unknown flags: 33 [ 735.856898] batman_adv: Cannot find parent device [ 735.911091] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 735.921178] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 735.932428] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 735.944540] xt_l2tp: unknown flags: 33 03:33:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffff000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 736.072055] batman_adv: Cannot find parent device [ 736.433247] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 736.476785] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 736.516914] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. 03:33:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffeee, 0xf2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x20000, 0x0, 0x0, 0x9}, r0, 0x400, 0xffffffffffffffff, 0x1) close(r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x8000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x70, 0x65, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x4028, 0x9, 0x20000000, 0x0, 0x773c, 0x4f0ed334, 0x4}, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000000)='&@[\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000680)='&@[\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000002c0)=@generic={0xa, "548c67ee731a5b6518a6da7902c9c1a7f099e05196b7a21c9f0b5f4a78e54be9900737da608f5a43b6085268568d0b8a23b836d9c169fce22046785c7c124a6a51cb2667c1c5b7b1e6e76156235ed40cd9ca5c9a0a0291f5070d64fcd550a4656abefa1c36be22fe12989dcddecdafc2307ec17e1b643724d3e8c24c2cbc"}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1, &(0x7f00000004c0)=ANY=[]}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) write$cgroup_pid(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x1800000000000060, 0x15, 0x0, &(0x7f0000000100)="000e003f0000007e5bc5795eca0000080000000000", 0x0, 0x100, 0xf2ffffff, 0x1c, 0x5b, &(0x7f0000000280)="f2a134bd66250198130000deffffffffffffff", &(0x7f0000000380)}, 0xfe33) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xc0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x9, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) 03:33:29 executing program 3: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x20, 0x2, 0xfffffeff000) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$ax25(0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x3a9, 0x0}}], 0x1, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') socket$inet6_udplite(0xa, 0x2, 0x88) preadv(r5, &(0x7f00000017c0), 0x315, 0x800000) dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40200, 0x0) sendto$inet(r2, &(0x7f0000000400)="7f00000020e104696ac4498c63de813492552c6f75fb841027ff80fdea99f7b81c51afb775a0cf0a841709d70df496d720e86755019f7e12d1fd66ab35a8c1434dc9bfbaaba5b96317f6dc42de002f0ce50b1730208e7d6ea56e8da793a24fd1b7db7bb0ea350c5ebc3ffeeb816ee4540d62d4da0910293553fd689eb5c1afc191e751e6d29362cc0f120d61704ef088c5393bccf234333e188813b3dd86ef5e99532cea812ac2c06e8ff897f8387ce9049c2acd7f3911e77f5a7b58a830b97c11", 0xfffffffffffffe89, 0x0, &(0x7f0000618000)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x8}, &(0x7f00000003c0)=0x8) syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f0000000280)) 03:33:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:29 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffff7f]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27ff08ccc33f71259ad824a32dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000"], 0x15) r2 = dup(r1) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x22, 0x2, 0x2) bind$isdn_base(r5, &(0x7f0000001140), 0x6) r6 = socket(0x22, 0x2, 0x2) bind$isdn_base(r6, &(0x7f0000001140), 0x6) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e23, 0xb4d3, @empty, 0x8}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r7}, 0x8) r8 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bd00040000000000000000000042e33089754c8107c3cd3923dd4a712f71aeeeba4c61028ba5b9110cc2ff06007b6b4816122d2550829eaa9435c99926022b8753a188faad9a223be6d06fe96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637e248689cce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacb40d32e4b58a8d2725561f6110fd7b06f98b5274cc5c1e298a16324fe2", 0xc0, 0xfffffffffffffffe) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r9, 0x89e5, &(0x7f0000000680)={0x7ff, "136e48548baf576b1f6fa548458034007d542c8bcf1612d678ff4fa61cedee9cb636b696f11ebdefcece2d4ecd23f190ed005355d198bdb255fea7ad5f509efdd4cf1bdcca6e513288719da6a7dc48eeecd67b67065f8d9c415fe8057e73d84440ada336733b9b228c7de997f7176105914c4bd1a8580440f9dfb7334067e62c"}) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r12, r11, r11}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r10, r8}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f00000000c0)={'wp256-generic\x00'}}) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x890c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/adsp1\x00', 0x405440, 0x0) 03:33:29 executing program 4: keyctl$instantiate_iov(0x14, 0x0, 0x0, 0xfffffffffffffd66, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x8101, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000180)={0x0, 0x1c9c380}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80900, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000002c0)={0x0, 'veth1_vlan\x00', 0x1}, 0x18) r3 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000005c0)='/dev/snapshot\x00'}, 0x30) syz_open_procfs(r4, &(0x7f00000001c0)='net/ipv6_route\x00') r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000000c0)={0x20}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x1040c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r11 = socket$netlink(0x10, 0x3, 0xc) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000080)="39000000100003044026064ba478fc650000ff3f010e0000450001070000181419001a0015000a00040008000100000010b1932da4e9d44c46", 0x39}], 0x1) r12 = socket(0x22, 0x2, 0x2) bind$isdn_base(r12, &(0x7f0000001140), 0x6) write$binfmt_elf64(r7, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES64=r10, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYBLOB="54f57b71008d42", @ANYBLOB]], @ANYRES32, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES64=r12, @ANYRES64=r3], 0x43) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f00000000c0)={0x20}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r14, 0x660c) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f00000000c0)) r15 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video35\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r15, 0x0, 0x7fff) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) close(r5) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x840c) [ 736.618635] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffff9e]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd73, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmmsg$inet(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1}}, {{0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002840)="1e647f5fb58a96b648323ecd7dd62b1bc9fd15ae9d327b14d186631b33128bcc7a657a03ad0eb70a61d948e501e56c9cf7f61c7cf1bb80ae4210ae623c3b6c87451f3003c7082aae205768c0ef957963281edf3deaa65b7238aa640483e1659c3c873b74795abe3866f2240e7aed667692dc67e937", 0x75}, {0x0}], 0x3}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000003a40)}, {&(0x7f0000004ac0)}, {&(0x7f0000005ac0)="a784cbca98531fabc180d8aeaa", 0xd}, {&(0x7f0000005b00)="5a2bb7695801d61fc8901b357f78a9ff5cbfe27b724cc60b7bc7e22a7ea0df0b414737a500d40a9b9b61d23beae10da5ebf4af7746e038b4dbd3ecd3d32ce9620d975b12b9f3456ce5227703e79dd66f23a5fae56b73489b4e98fd385301ed9535f7637944a413", 0x67}], 0x4, &(0x7f0000005cc0)=[@ip_tos_u8={{0x2c0, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000005d40)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000005e40)}}, {{0x0, 0xfd34, 0x0, 0x0, &(0x7f0000006200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_int={{0xffffffffffffff47, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000006300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000007780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007680)}], 0x5, 0x0, 0xfffffdc0}}, {{0x0, 0x38a, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="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"], 0xfffffed8}}], 0x7, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 03:33:30 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0xe4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40008100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1ff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4014040}, 0x80) membarrier(0x4, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}]}}) 03:33:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:30 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000436b5797846c387a40814f"]) 03:33:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffff0]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 737.121710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.167443] netlink: 'syz-executor.4': attribute type 8 has an invalid length. 03:33:30 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140)={0x22, 0xff}, 0x6) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x233, &(0x7f0000000140), 0x1}, 0x0) 03:33:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)={0x1f8, 0xffffffffffffffda, 0x2, [{{0x6, 0x1, 0x27, 0x0, 0x9, 0x80000001, {0x5, 0x9, 0x570, 0x800, 0x10001, 0x8001, 0x401, 0x0, 0x80, 0x0, 0x800, r3, r4, 0x1f, 0x7}}, {0x1, 0xfffffffffffffeff, 0x0, 0x749f}}, {{0x0, 0x2, 0x8000, 0x3, 0x1000, 0xfff, {0x2, 0x6, 0xfffffffffffffffa, 0x59a, 0x133b, 0x40, 0x1, 0x5, 0x8000, 0x8001, 0x1d, r5, r6, 0x3, 0x4}}, {0x0, 0x9, 0x17, 0x5, 'trusted@vmnet1,selinux^'}}, {{0x0, 0x0, 0x7f0, 0xeb6, 0xffffffe1, 0x1, {0x0, 0x7fffffff, 0x7, 0x8, 0xff, 0x6, 0x8, 0x4, 0x3, 0x8001, 0x62, r7, r8, 0x8}}, {0x1, 0x0, 0x1, 0xbca, '['}}]}, 0x1f8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000fe80000000000000000000000300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000002b000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400686d616328736861332d3531322d67656e657269632900"/244], 0x13c}}, 0x0) 03:33:30 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xfffffffc]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 737.371045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.401035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:33:30 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd73, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmmsg$inet(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1}}, {{0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002840)="1e647f5fb58a96b648323ecd7dd62b1bc9fd15ae9d327b14d186631b33128bcc7a657a03ad0eb70a61d948e501e56c9cf7f61c7cf1bb80ae4210ae623c3b6c87451f3003c7082aae205768c0ef957963281edf3deaa65b7238aa640483e1659c3c873b74795abe3866f2240e7aed667692dc67e937", 0x75}, {0x0}], 0x3}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000003a40)}, {&(0x7f0000004ac0)}, {&(0x7f0000005ac0)="a784cbca98531fabc180d8aeaa", 0xd}, {&(0x7f0000005b00)="5a2bb7695801d61fc8901b357f78a9ff5cbfe27b724cc60b7bc7e22a7ea0df0b414737a500d40a9b9b61d23beae10da5ebf4af7746e038b4dbd3ecd3d32ce9620d975b12b9f3456ce5227703e79dd66f23a5fae56b73489b4e98fd385301ed9535f7637944a413", 0x67}], 0x4, &(0x7f0000005cc0)=[@ip_tos_u8={{0x2c0, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000005d40)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000005e40)}}, {{0x0, 0xfd34, 0x0, 0x0, &(0x7f0000006200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_int={{0xffffffffffffff47, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000006300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000007780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007680)}], 0x5, 0x0, 0xfffffdc0}}, {{0x0, 0x38a, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="c40000000000000000009a461de07ef20bbe0e1b362b2b29a5000007000000442c210313b8acac00000001e000000200010001e000000100000007e000000100000007e000000200000a5a8313ecac1414aa000000007f000001e00000029b0546133ec90940947a07c1244000070616dc9030444cf9e1ac1414bb000004017f00000100000100ac1e00010000020000000b00000000097f00000100000003ac1414aa00000fffac1414aa000000067f00000100000001ac14142bb14e5f2620c88a8873c53a1da58f7a00000401891357ac141421ac1414bb00000000ac14147c5ad0e183085df1000000000000000000000100000053000000000000"], 0xfffffed8}}], 0x7, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 737.467692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 737.498721] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.674875] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 737.692070] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. 03:33:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xfff) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x400, 0x1, 0x0, 0x1, 0x9, 0x1, 0x5e8f, 0x5, 0x80000000, 0x0, 0x4, 0x8, 0x6, 0x8000, 0x24, 0x5, {0x9, 0x8}, 0x5}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x1}], 0x1c) 03:33:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xffffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() syz_open_dev$mice(0x0, 0x0, 0x80) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0), 0x4) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2dcdf492", @ANYRES16=r3, @ANYBLOB="f51000"/14], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x265) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_OPERSTATE={0x5, 0x10, 0x16}]}, 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r10, r11, 0x0, 0x320f) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond_slave_0\x00'}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) pipe(0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1}}, {{@in6=@dev}, 0x0, @in6=@local}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000002180)={@dev}, &(0x7f00000021c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000100001049cab00"/20, @ANYRES32=0x0, @ANYBLOB="00c600000064b851d922eca4de00010062726964676500001dfc02008056853377cc090c95eedcc832d54bfaaa6eda5608662c780000000000001afba57df6a11b2a2eedc14f8b00f2091c6205631f14bf9f1bd6f72a10e010b86756bcaa3f91344f9f492727fcd519b2ab480982677bdb7a3d351a0cbaaca5a47156fd050db024b7106c04f1526f84dd6499490abb2248ae50642506e3d5f9febff792b4b7916266b77b8e404f4719363d8a483cb23c2ab19c00e0ff4b579f2dba1d3215f2a1ccc837da08cd5eb4a224b2ddf362b19031473cd93ab51a982ae2812091fcdfe432d6cdb40388899adebf477c9150f47a49"], 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000699c0104000000000000000000000000a43db143524b38b89e67423133840cc75740dd978e27e906b97d05ac6206f16328c7a839c30976686042e0f4c9706ccf38ae16386aea569adb03b327446c823ffaa233c87c3ee58fc10b1fc16b16f51a979dabe8cdd7cb5ef4a44315b79be771d8abccd7510551e632fb3ddd385fc76847d991271f4e3ae9fb96db3ec2a57b45153007784466022be6af0380a1b4e0e777c738ee65fc7ad03607497a347e776a8db798fbc1c86fa2713fb00235fd01565fd55d220d702553f038d68272d76a3b50c1a4e284a30f212b", @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 03:33:31 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) connect$ax25(r1, &(0x7f0000000280)={{0x3, @bcast, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]}, 0x48) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001300)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0x10036) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000b) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x6609, 0x0) 03:33:31 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd73, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmmsg$inet(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1}}, {{0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002840)="1e647f5fb58a96b648323ecd7dd62b1bc9fd15ae9d327b14d186631b33128bcc7a657a03ad0eb70a61d948e501e56c9cf7f61c7cf1bb80ae4210ae623c3b6c87451f3003c7082aae205768c0ef957963281edf3deaa65b7238aa640483e1659c3c873b74795abe3866f2240e7aed667692dc67e937", 0x75}, {0x0}], 0x3}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000003a40)}, {&(0x7f0000004ac0)}, {&(0x7f0000005ac0)="a784cbca98531fabc180d8aeaa", 0xd}, {&(0x7f0000005b00)="5a2bb7695801d61fc8901b357f78a9ff5cbfe27b724cc60b7bc7e22a7ea0df0b414737a500d40a9b9b61d23beae10da5ebf4af7746e038b4dbd3ecd3d32ce9620d975b12b9f3456ce5227703e79dd66f23a5fae56b73489b4e98fd385301ed9535f7637944a413", 0x67}], 0x4, &(0x7f0000005cc0)=[@ip_tos_u8={{0x2c0, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000005d40)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000005e40)}}, {{0x0, 0xfd34, 0x0, 0x0, &(0x7f0000006200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_int={{0xffffffffffffff47, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000006300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000007780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007680)}], 0x5, 0x0, 0xfffffdc0}}, {{0x0, 0x38a, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="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"], 0xfffffed8}}], 0x7, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 738.003005] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 738.146726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40041 sclass=netlink_route_socket pig=17068 comm=syz-executor.3 03:33:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x2]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 738.244207] audit: type=1400 audit(2000000011.600:116): avc: denied { validate_trans } for pid=17056 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 03:33:31 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r1, 0x0, 0xfffffffffffffd73, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r5}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20c200a2, r8}) sendmmsg$inet(r1, &(0x7f0000007d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2c1}}, {{0x0, 0x0, &(0x7f0000003940)=[{0x0}, {&(0x7f0000002840)="1e647f5fb58a96b648323ecd7dd62b1bc9fd15ae9d327b14d186631b33128bcc7a657a03ad0eb70a61d948e501e56c9cf7f61c7cf1bb80ae4210ae623c3b6c87451f3003c7082aae205768c0ef957963281edf3deaa65b7238aa640483e1659c3c873b74795abe3866f2240e7aed667692dc67e937", 0x75}, {0x0}], 0x3}}, {{&(0x7f0000003a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000005c40)=[{&(0x7f0000003a40)}, {&(0x7f0000004ac0)}, {&(0x7f0000005ac0)="a784cbca98531fabc180d8aeaa", 0xd}, {&(0x7f0000005b00)="5a2bb7695801d61fc8901b357f78a9ff5cbfe27b724cc60b7bc7e22a7ea0df0b414737a500d40a9b9b61d23beae10da5ebf4af7746e038b4dbd3ecd3d32ce9620d975b12b9f3456ce5227703e79dd66f23a5fae56b73489b4e98fd385301ed9535f7637944a413", 0x67}], 0x4, &(0x7f0000005cc0)=[@ip_tos_u8={{0x2c0, 0x0, 0x1, 0xf1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000005d40)={0x2, 0x4e22, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000005e40)}}, {{0x0, 0xfd34, 0x0, 0x0, &(0x7f0000006200)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffd}}, @ip_tos_int={{0xffffffffffffff47, 0x0, 0x1, 0xfa}}, @ip_tos_int={{0x14}}], 0x48}}, {{&(0x7f0000006300)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000007780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000007680)}], 0x5, 0x0, 0xfffffdc0}}, {{0x0, 0x38a, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="c40000000000000000009a461de07ef20bbe0e1b362b2b29a5000007000000442c210313b8acac00000001e000000200010001e000000100000007e000000100000007e000000200000a5a8313ecac1414aa000000007f000001e00000029b0546133ec90940947a07c1244000070616dc9030444cf9e1ac1414bb000004017f00000100000100ac1e00010000020000000b00000000097f00000100000003ac1414aa00000fffac1414aa000000067f00000100000001ac14142bb14e5f2620c88a8873c53a1da58f7a00000401891357ac141421ac1414bb00000000ac14147c5ad0e183085df1000000000000000000000100000053000000000000"], 0xfffffed8}}], 0x7, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 03:33:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsn(0x0, 0x5, 0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="9209bebc4594a0bd1886f2ded627a4e778ca2e826bfe3288e4b1a5c937dc8652cc12ada74cb0bff08bc893094bd8325f0acf5e0ea132660f12ce490b4ccccd077b48779e1e6ace96778a28cbda15e5885e17717d5d74bbee844cc0209646b569fcc55e4b0a058653e678c61beb3700e2610a79e60ec1dd5c68c624f2f108002a0c1ecbc641f67a8678e8bc9113dacdc7fbf7", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001540)={r3, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000001600)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3}, &(0x7f0000000480)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREAD(r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg(r4, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x7b, 0x0}, 0x0) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xffd6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xb5f10c86f4c3526e) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r11) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010002000000000002000400fa0e7dbf865192dc63ec8e294b90ce97b74a60d769ee5c39c59bc8d006a858e5b99d648f2481b4ea4f17cbc2262d83129c164fae", @ANYRES32=r7, @ANYBLOB="1f70a76423fcf6c60b5a5b003bfbf690717cce1f5f05be47badef20806f31295410c76d9de513b4920f43eb40e1b62984eeaf42410c30e4cd6909e26e131a8f8595ad5f0f4fb4546c9fe704037b6964c5d7afb170cc936c756799177a829e7882cefa82dc2c9bf1d", @ANYRES32=r8, @ANYBLOB="5604cd1426155d63d7756d98b133e8b3d7a95f8c2c33241bf9c27ea8caf33a6fd2f40a9995abe1afafbabb6044b92943a3", @ANYRES32, @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r10, @ANYBLOB="3a3d3c3ec3d203c54ae2eac5c6a6415651ac0bed439bf4807bc70ec7dd4ef28df5b3ba3b40e14b85dd04c554d2e2c189f80fdd57fed5e7593f238805c8127a3d501db129591f000956e742048ce959bd59f17e80ca046a9e9486d66aa3f90815ac5ebafff674bd20c40bb899ddc320622d6af4b629d26f16cce5dda5c05c6e98ae5e534639e07c833291f6fd848d1d46322d4258046826505ff39c6e2daff216e78a1374", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\b', @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYRES32=r11, @ANYBLOB='\b\x00', @ANYBLOB='\b\x00', @ANYPTR64, @ANYRES32, @ANYBLOB="1000250000000000207f"], 0x15, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r12, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r12, 0x400000001ffffffd) accept4(r12, 0x0, 0x0, 0x0) r13 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r13, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r14) r15 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r15, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xffd6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xb5f10c86f4c3526e) r18 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r20) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010002000000000002000400fa0e7dbf865192dc63ec8e294b90ce97b74a60d769ee5c39c59bc8d006a858e5b99d648f2481b4ea4f17cbc2262d83129c164fae", @ANYRES32=r16, @ANYBLOB="1f70a76423fcf6c60b5a5b003bfbf690717cce1f5f05be47badef20806f31295410c76d9de513b4920f43eb40e1b62984eeaf42410c30e4cd6909e26e131a8f8595ad5f0f4fb4546c9fe704037b6964c5d7afb170cc936c756799177a829e7882cefa82dc2c9bf1d", @ANYRES32=r17, @ANYBLOB="5604cd1426155d63d7756d98b133e8b3d7a95f8c2c33241bf9c27ea8caf33a6fd2f40a9995abe1afafbabb6044b92943a3", @ANYRES32, @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r19, @ANYBLOB="3a3d3c3ec3d203c54ae2eac5c6a6415651ac0bed439bf4807bc70ec7dd4ef28df5b3ba3b40e14b85dd04c554d2e2c189f80fdd57fed5e7593f238805c8127a3d501db129591f000956e742048ce959bd59f17e80ca046a9e9486d66aa3f90815ac5ebafff674bd20c40bb899ddc320622d6af4b629d26f16cce5dda5c05c6e98ae5e534639e07c833291f6fd848d1d46322d4258046826505ff39c6e2daff216e78a1374", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\b', @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYRES32=r20, @ANYBLOB='\b\x00', @ANYBLOB='\b\x00', @ANYPTR64, @ANYRES32, @ANYBLOB="1000250000000000207f"], 0x15, 0x0) r21 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffd, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r21, 0x29, 0x22, &(0x7f0000000b80)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000580)=0xffd6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xb5f10c86f4c3526e) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r24) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000000010002000000000002000400fa0e7dbf865192dc63ec8e294b90ce97b74a60d769ee5c39c59bc8d006a858e5b99d648f2481b4ea4f17cbc2262d83129c164fae", @ANYRES32=r22, @ANYBLOB="1f70a76423fcf6c60b5a5b003bfbf690717cce1f5f05be47badef20806f31295410c76d9de513b4920f43eb40e1b62984eeaf42410c30e4cd6909e26e131a8f8595ad5f0f4fb4546c9fe704037b6964c5d7afb170cc936c756799177a829e7882cefa82dc2c9bf1d", @ANYRES32=r23, @ANYBLOB="0704cd1426155d63d7756d98b133e8b3d7a95f8c2c33241bf9c27ea8caf33a6fd2f40a9995abe1afafe5a0f8935208aa33", @ANYRES32, @ANYRES32, @ANYBLOB="02000600", @ANYRES32, @ANYBLOB="3a3d3c3ec3d203c54ae2eac5c6a6415651ac0bed439bf4807bc70ec7dd4ef28df5b3ba3b40e14b85dd04c554d2e2c189f80fdd57fed5e7593f238805c8127a3d501db129591f000956e742048ce959bd59f17e80ca046a9e9486d66aa3f90815ac5ebafff674bd20c40bb899ddc320622d6af4b629d26f16cce5dda5c05c6e98ae5e534639e07c833291f6fd848d1d46322d4258046826505ff39c6e2daff216e78a1374", @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB='\b', @ANYPTR64=&(0x7f0000000200)=ANY=[], @ANYRES32=r24, @ANYBLOB='\b\x00', @ANYBLOB='\b\x00', @ANYPTR64, @ANYRES32, @ANYBLOB="1000250000000000207f"], 0x15, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x8}, [{0x2, 0x0, r5}, {0x2, 0x0, r10}, {0x2, 0x2, r14}, {0x2, 0x0, r17}], {0x4, 0x6}, [{0x8, 0x1, r24}], {0x10, 0x3}, {0x20, 0x2}}, 0x4c, 0x6) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r25 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r25, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="6f7306000000"]) r26 = open(0x0, 0x8406d2538cca1f8d, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r26, 0x84, 0x3, &(0x7f0000000240), 0x0) ioctl$TUNSETFILTEREBPF(r26, 0x800454e1, &(0x7f0000000000)) preadv(r25, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) preadv(r25, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/164, 0xa4}], 0x1, 0x0) write$FUSE_INIT(r25, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') syz_open_dev$audion(0x0, 0x3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:33:31 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 738.531912] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000040) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) [ 738.706315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40041 sclass=netlink_route_socket pig=17062 comm=syz-executor.3 03:33:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000ef40)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x11}}, 0x1c, 0x0}}], 0xffffffffffffffd7, 0x40004) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2000, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000080)) 03:33:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 738.791596] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 03:33:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x282082, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80100, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_dev$vcsu(&(0x7f0000000440)='/dev/vcsu#\x00', 0x8, 0xc00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4d02860b", @ANYRES16, @ANYBLOB="010100000000000000000100000000000000060000000008001473797a300000000013abfd179076a60606692ae6690a5bc1afcb40a101781cbbc2acf0a147bda64e14ac85921900fe267404a1967d8c5b859de435279392f39bf78b54eed6d7a59d22fbd888805412ed2a49b63f3cb81595627eaf3cf50b1c8de81c613d12b81456f417ac65b31b5f9ed81704ac4b731e0aab2be858f36c4a06daea232ea4f84f88a6473785f5fd0248e08118151cdead622634fd85e12d21344a218ef6a88f90b2f6c4d6e0f53bf8cbf844f2"], 0x28}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000740)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000540)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x408022}, 0xffffffffffffffb2, &(0x7f0000000500)={&(0x7f00000004c0)={0x12, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044040}, 0xc0c4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x22, 0x2, 0x2) bind$isdn_base(r9, &(0x7f0000001140), 0x6) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800200000180002001400010000000000a2b95aab404891", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaad1000007"], 0x5}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c0001006d616376746170000400020008000500", @ANYRES32=r8, @ANYBLOB="1cd4b4041406d6b224b4579fe8ae85fbc465be8b7d979a1ff5b84532592ce66824fe30bb777682cda166004a815ce33558c1a3f438b81a345c705143120d5b3d699a03f2b5ba2e3e61e18e46184018a59a6634b6127b5d2eb90f09971b30690130646a8b6b6b174550715a8a6683c99f6000bfdbe20018c92fa21b71cbde88f93aa1947b8eb74b9595f98f215a10d5b7877e210b6d5b"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000640)={'nat\x00'}, &(0x7f00000006c0)=0x78) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000580)={@mcast1, @empty, @mcast2, 0x642000, 0x800, 0x3, 0x400, 0x3, 0x80020000, r8}) ftruncate(r5, 0x208200) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x1}, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4, 0x2, 0xfffffffe}, &(0x7f0000000480)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x10, &(0x7f00000003c0)={&(0x7f00000000c0)=""/108, 0x6c, r11}}, 0x10) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) 03:33:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 738.851650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 738.864641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:33:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/676], 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x4900, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000040)={0x3, 0x2}) r2 = socket(0x22, 0x2, 0x2) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'vxcan1\x00', 0x8000}) bind$isdn_base(r2, &(0x7f0000001140), 0x6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)) [ 739.053006] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 739.095921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready 03:33:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) dup(0xffffffffffffffff) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r2}, &(0x7f0000000440)=0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r7 = socket(0x22, 0x2, 0x2) bind$isdn_base(r7, &(0x7f0000001140), 0x6) sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000000)=0x80000000000711, 0x4) sendto$inet6(r10, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) recvfrom$inet6(r10, 0x0, 0x0, 0x40012062, 0x0, 0xfffffffffffffdc3) ftruncate(r6, 0x200004) sendfile(r3, r6, 0x0, 0x80001d00c8c9) 03:33:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 739.170539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 739.234720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 739.268122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 739.325568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 739.333390] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan3: link becomes ready 03:33:32 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000000)="04243829c3d4beeeb5c9fba75606cd5b", 0x10}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:33:32 executing program 0: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b) fdatasync(r2) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) socket$inet_sctp(0x2, 0xd089b87e140f6242, 0x84) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000040)=0x8) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0xfffa, r1}) 03:33:32 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x9189ae49c01745af, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)='veth1_to_bond\x00', 0x100, 0x7ff, 0x9}) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:33:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:32 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 739.561634] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:33 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000000)="04243829c3d4beeeb5c9fba75606cd5b", 0x10}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r2, r3, 0x0, 0x102000004) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:33:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:33 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x480403) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0xe) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="cefaad1bb8", 0x5}], 0x0, 0x500) 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x9]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 739.910883] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xa]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:33 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) dup3(r2, r3, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="68090000000000000063746f723d3078b13030303030303030303030301030302c00"]) [ 740.109276] audit: type=1800 audit(2000000013.460:117): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16520 res=0 [ 740.178181] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000240)=@generic={0x11, "000001000000000008004476e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b767950080000000000000fc00013c5811039e15775027ecce66fd792bbe0e5bf5ff1b0816f3f6db1c00010000000000003849740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macsec={{0xc, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) 03:33:33 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f00000000c0)='net/protocols\x00') r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0xfe, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x3}, 0x0, 0x1, 0x0, 0x0, 0x2000000000000, 0x2}, r2, 0xffffffffffffffff, r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x28a2000000) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22408, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r6, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xffffffd8) 03:33:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000140)=0x1) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f00000001c0)=0x7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0x9d0000, 0x0, 0x8001, r4, 0x0, &(0x7f0000000040)={0x980921, 0x8, [], @ptr=0x8}}) ioctl$VT_OPENQRY(r5, 0x5600, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto$inet(r0, &(0x7f00000002c0)="0c268a927f1f6513b967481241ba7860005cf65ac618ded89748f7ffeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66bad8139d1153e43b5f616bb6f561f218134e39c64a8489d14e621539e951378a5d55b14cd315ab8cf5091436a01a472994109763e74b84ada6e7ba42a1bc65cdd29ba4137225ffaa915dbd13d8085bc103ef82680c3434ae7414489813154eea4078220011dc15779be7f300837cc05d0d76ae9d959ea727ecef40d9a4c19ef139888e3977784a922e8650007daa1f0c022d620f5998d3dbab07a24300c50252", 0xec, 0xc, 0x0, 0x3d5) 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xc]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 740.394598] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:33 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xe]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='u:r:untrusted_app:s0:c512,c768\x00', 0x23, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0x30, 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0x30, 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r6, 0x21, 0x30, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r7, 0x21, 0x30, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') read$FUSE(r8, &(0x7f0000000280), 0xfffffed3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000003080)={0x0, 0x0}) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r12, 0x21, 0x30, 0x0, 0x0) r13 = fcntl$getown(r12, 0x9) fstat(r0, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r15) r16 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r16, 0x21, 0x30, 0x0, 0x0) r17 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_dccp_int(r17, 0x21, 0x30, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000b00)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000000280)="6d2670899223f94ae4e4a9df9186644602e463f48f1cd1b6fb84d6ddff6edacc9a8993a45a141073e3e531b9949b0b75238032e15a25af8e0b3de46ecb2c9da89772b938118268f475eb746c9f02bf8e70950049700ef4220f0bf4463e82993ab23339dbae613d2dbed803101783071845fe5de809977566", 0x78}, {&(0x7f0000000300)="03740e8aaff363e93363643f5e7e29a14a6452ee7929a7350db5077f126198788eb7450ab2860a029a86354eac0eb59b503580290d21ca4656c7606011", 0x3d}, {&(0x7f0000000ec0)="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", 0x1000}, {&(0x7f0000000a00)="789955482d7e7e88efc465b1ec6a8e335855a65ece896122c3a2a3426bfd9bef4b371127a008b645d85a5ba5f5dc6abeb792b466de30fbe5497c63be964b9742b1055ee2ddf905555e98faf6d1cede69502c581a3b41d87f45313e4e1f742f081e9e202fc2b0da4a39388dc8fd7655d33e75ea1923d92b20027798afebbf0e5f4ee98a18d470816a39", 0x89}, {&(0x7f0000000d00)="be40b4606b843c415a817f2a6b6279f5e68e88c3974f8ebc12fca6940def276530b65dec8a66fe86fc8fc27d8ee0c003dc04ce15758efd4273832aa2d27d68c4dd455390f2400c6c4061399aff3a54efd1f5668a7ddd03a8ed69e4c0a722f0e05461f4021769f3f228598900d02a9216fb7b4c95e1c250b674ad3c179890b459c10e359df560ced4", 0x88}, {&(0x7f0000000dc0)="711ace22a275fffcca8d52461be7fa38cf8740ffe8a89ba093800f80cc39db48328fc595e7139ee35e525c0d054f56394416ba1f7fac92cd8d2daa01eb61314b0cb15e2e66e123610d66447ceed5b37171885ee3e9e4b1b0f35cd47acebbcbeea58e06522b7bbdd1b6c83ff75460e60d", 0x70}, {&(0x7f0000001ec0)="13703efa4ccd607b6099a0564f26cbc7ca1c10562ee00d8ce44f1cfbdf2f726d4bd98a5dd50ae55649d934ad784f22c553d0d864c47cd3c056cce0171faa7739ca6deeec88f71b82f8d4760b3e48", 0x4e}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="096207bb0014602a8c6e5556c98bb5d6a0295c1e8ee59a57f5ed09f11c03ca5be48ebe4a0a09afce692851b7be94539b5600ffbf8ca6a6023f8814dad771d9baf79be297", 0x44}], 0x9, &(0x7f0000003180)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r3, r4, r0, r5, r1, r6, r7, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x18, 0x1, 0x1, [r16, r17]}}], 0xa8, 0x40009}, 0x40000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r18 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x20600, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r18, 0xc0045006, &(0x7f00000000c0)=0xb3) r19 = socket(0x22, 0x2, 0x2) bind$isdn_base(r19, &(0x7f0000001140), 0x6) sendmsg(r19, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0xffffffffffffff56}, 0xc100) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0x10c7}], 0x1) r20 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r21 = socket(0x80000000000000a, 0x2, 0x0) fsetxattr$security_selinux(r21, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='u:r:untrusted_app:s0:c512,c768\x00', 0x23, 0x0) sendto$netrom(r21, &(0x7f0000000140)="3f139ad652bf4eab45b0589e9bca767e46297c6095a7a7d791efc80c7f9d5d8a7b1c12bfd38fb3ff8c50cf", 0x2b, 0x10000000, &(0x7f0000000180)={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) sendmsg$TIPC_NL_BEARER_ADD(r20, &(0x7f0000000e80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)={0xe8, 0x0, 0x200, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x95}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1e7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc5}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) 03:33:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0x12}]}, 0x18}}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x7, 0x2, 0x4, 0x1001a0840, 0xd6, {0x77359400}, {0x0, 0x0, 0x1, 0x4, 0x9, 0x7, "57b82b70"}, 0x8, 0x4, @userptr=0xffff, 0x6dba, 0x0, 0xffffffffffffffff}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xd6a250440a9e5fa7, 0x0) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = socket(0x22, 0x2, 0x2) bind$isdn_base(r6, &(0x7f0000001140), 0x6) r7 = socket(0x22, 0x2, 0x2) bind$isdn_base(r7, &(0x7f0000001140), 0x6) r8 = socket(0x22, 0x2, 0x2) bind$isdn_base(r8, &(0x7f0000001140), 0x6) r9 = socket(0x22, 0x2, 0x2) bind$isdn_base(r9, &(0x7f0000001140), 0x6) r10 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x10, 0x80800) r11 = socket(0x22, 0x2, 0x2) bind$isdn_base(r11, &(0x7f0000001140), 0x6) r12 = socket(0x22, 0x2, 0x2) bind$isdn_base(r12, &(0x7f0000001140), 0x6) r13 = socket(0x22, 0x2, 0x2) bind$isdn_base(r13, &(0x7f0000001140), 0x6) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000440)=[0xee01, 0xffffffffffffffff, 0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0]) r16 = getpid() getresuid(&(0x7f0000000480), &(0x7f00000004c0)=0x0, &(0x7f0000000500)) r18 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) setregid(r19, 0x0) sendmsg$netlink(r2, &(0x7f0000000640)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x12009000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000180)={0xb4, 0x13, 0x4, 0x70bd25, 0x25dfdbff, "", [@generic="7b5468ed663e7bec03432d539b6f2826fab338cd8cf350eb4ce02d036436633261496429d209d98aa18625b4715e79c917172ab646ee16a95b88ec421bcc2ec704d10074dcf5472de51f4caea11c836462d40570ba43d9f536194238991ea0b9abf2d33183a73998290e341a6928b94dfb49b98265d5c24c3db563b04df826b1913685c615bae276d8c445913e596a95d4561105cec7ea23658abc21e479da11b8"]}, 0xb4}], 0x1, &(0x7f0000000540)=[@rights={{0x2c, 0x1, 0x1, [r1, r3, 0xffffffffffffffff, r4, r0, r5, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r6, r7, r8, r9, r10, r11]}}, @rights={{0x28, 0x1, 0x1, [r1, r12, r13, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r19}}}], 0xc8, 0x4}, 0x48000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 740.594665] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:34 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:34 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x10]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:34 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x3, @perf_config_ext={0x182fe0b2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380), 0x6) rt_sigpending(&(0x7f0000000080), 0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x4000, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) r5 = fcntl$dupfd(r3, 0xc0a, r4) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800df}, 0xc8000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000100)={0x4, 0x2, 0x0, 'queue0\x00', 0x5}) [ 740.769492] xt_CT: You must specify a L4 protocol and not use inversions on it [ 740.775688] audit: type=1400 audit(2000000014.110:118): avc: denied { mac_admin } for pid=18747 comm="syz-executor.2" capability=33 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 740.810787] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 740.870202] audit: type=1400 audit(2000000014.200:119): avc: denied { relabelto } for pid=18747 comm="syz-executor.2" name="UDPv6" dev="sockfs" ino=181926 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 03:33:34 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x401, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x2, 0x9, 0x2, {0x9, 0x80000000}, 0x0, 0x1000}) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80) 03:33:34 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x38]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc1a4d5717cd1b136) dup(0xffffffffffffffff) open(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="02f600000000000008001b0000000000012c80c8f30d2cd505890a0c8969019f5bce2f495225ee37fe11156e0921cc51212f21d2c01f62b249b50cd5645ca4bca13260e54f36250280377a7264303769159a7ab442afce560fc440d878e4643669e2d67188d0f716dbda302f9911534f286207b7f376c3ea0729c7abf64d7e87b681eb90a07dd0959bce5f695e0143d8a507b7934d4c4d6a39a4599e4b8d54c23714d780d639641fe4b945af009993ead000bc0852ac2fa187de1c71710693d5eea72a898ef7d087323c35382404721104f747a0ee6a6c91fb451a69a3f53de2036ca394172516419b047bfe18d809a2b0303fc544a55e"], 0x28}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x1, 0x22a200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 03:33:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000280), &(0x7f00000002c0)=0x10) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000240)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xc3ffffff, &(0x7f00000000c0)={&(0x7f0000002700)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4ac9a5b0d9c56e1b, 0x0) ioctl$SNDCTL_DSP_STEREO(r9, 0xc0045003, &(0x7f0000000080)) 03:33:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000000101000000000000e2fcac2d000000"], 0x14}}, 0x0) 03:33:34 executing program 3: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300)=0x5, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4a, 0x4a, 0x5, [@typedef={0xd, 0x0, 0x0, 0x8, 0x1}, @func={0xf}, @datasec={0xe, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x0, 0x6}, {0x0, 0xcc3, 0xdb22}, {0x5, 0x7}], "b1a4"}]}, {0x0, [0x30, 0x30, 0x30]}}, &(0x7f0000000140)=""/105, 0x69, 0x69, 0x1}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x0, 0x0) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000004c0)={0x46, 0x2, 0x0, "acaf64357c7f52e490c7feb20ffb0dcab9f48cd8b24749f5c0d21f81c58ef7fc1d83caf51d50394c2c3201a252dd4669071b6761283b0e46700b08b7c715e73bba5904dee1cb"}) write$P9_RGETLOCK(r2, &(0x7f0000000380)={0x28, 0x37, 0x0, {0x2, 0x8, 0x7fff, r3, 0xa, 'ppp0^eth1]'}}, 0x28) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r6 = socket$packet(0x11, 0x2, 0x300) dup(r6) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000000)={0x0, 0x1, 0xfff, 0x2, 0x5}) r8 = memfd_create(&(0x7f00000002c0)='\x00\xb3y\xb1\xc4\xd6)\xa3\xe2\v\x00\x00u\x81\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\xf5\xefN`\xb8\xf2F\f=\xcf\x93\x8d\x8d\x11\xddy\xc5=\xeb\xd9\xa7\x10\xbe\x03 E-\x82\xa0}6\xaa\xa5\x85\xc3\f#+\xbe\xed x,\xb6v-\x00\x01\x00\x00\x00\x00\x00\x00\xdcd^\xdbd\xd3k:\xb08\xba\xb9\xa5 \xb9\xcc\xf5\xa3\xa8\x10\x01U\"i.\xdb0H\x02UU\xaa\xdb2\x0f\x10\xa80f]6)4\xde\xa4\xc65\xcf\xc8-i\xad+O\xc2%V2\xc7\xbb\x85\xba*\xbe\xa4\xc2\xb0\xe8\x18HY\xc7\xb0\x84\f\xcflag\xdd\x813$UK', 0x655754e8b27b41c5) r9 = dup2(0xffffffffffffffff, r8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$P9_RLINK(r9, &(0x7f0000000280)={0x7}, 0x269) r10 = socket$inet(0x2, 0x4000000805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = dup3(r10, r11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="fddf5bda031a9fe1bace7953471a92a2c4f15c27166f3c288a67ddf976ecb1da64d2aaa0bf48ba38437613b654a93deeb13c2b3e7282313e55cc13d829ae93e4e589fdb4324ea18ad36c4a3fa0872cc21377b48d4f1d9527ae4ee1da60314735a97680bc5f606a9c07a3158553cac8384528953d05a1574d0357ee044891b6c826ba7d8cf3ffe0817f354d441ce04220223b1b86052036b1ac436ac6ed8ea1e7f1aaadf8fadfa53781cd809fee3f8ebd416068b13dfa7db94fdc05", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) ioctl$VIDIOC_QUERYBUF(r12, 0xc0585609, &(0x7f00000003c0)={0x9, 0xa, 0x4, 0x200000, 0x1, {0x77359400}, {0x2, 0x4, 0x80, 0x7, 0x0, 0x4, 'R~z\t'}, 0x8, 0xc, @fd, 0x3f, 0x0, r5}) dup2(r5, r1) [ 741.192742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 741.225220] bridge1: port 1(macvlan0) entered blocking state 03:33:34 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x60]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 741.249238] bridge1: port 1(macvlan0) entered disabled state [ 741.276393] device macvlan0 entered promiscuous mode 03:33:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x4}}]}, 0x20}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/405], 0x195) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket(0x10, 0x80000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4) getpid() r5 = getpid() getpid() r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) rt_tgsigqueueinfo(r6, r5, 0x1b, &(0x7f00000002c0)) clock_adjtime(0x3, 0x0) ptrace(0xffffffffffffffff, r5) semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x4e20, @loopback=0x7f005d00}, {0x2, 0x4e24, @empty}, 0xd6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3cc, 0x43}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) r9 = accept$alg(r8, 0x0, 0x0) r10 = dup(r9) getsockname$packet(r10, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0x80000001, 0x2, 0x1e}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @multicast2}, 0x34, 0x0, 0x2, 0x46a, 0x4}) setsockopt$IP_VS_SO_SET_ZERO(r7, 0x0, 0x48f, &(0x7f0000000280)={0x16, @local, 0x4e20, 0x4, 'sh\x00', 0x17, 0x1f, 0x5b}, 0x10c) 03:33:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:35 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0xe69399df840e602, 0x10) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f0000000040)="1026df0c7e36a80681cf4af17183dbcb934d0842ef983c5bd680c87afac8f968d55685612536d6fccac8af413dd2beedd888cbeeaa9e13619b499faa237a5161b6ae2d8fd87755549b49da537a97257a28e94ec72272e56461ed2f37018d5745b0c2feb14347f8be1d12cc697913fb0bad820c9d2e944e8ac3ae401704bd8af99a2bbd3d5b663eb26d1beb1c0738ba7d8b34a3055462fa5461eaec4552feae680ccbedc85cc8889a0c3a7976b6c7166626b9d28c9619185c2d27c3db99079e2ea8c05fc7e8898ef97796d77c82da4ff330b77b3825303bf306e8ffe0a54fd56a", 0xe0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast2}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = socket(0x22, 0x2, 0x2) bind$isdn_base(r6, &(0x7f0000001140), 0x6) r7 = socket(0x22, 0x2, 0x2) bind$isdn_base(r7, &(0x7f0000001140), 0x6) connect$llc(r7, &(0x7f0000000380)={0x1a, 0x311, 0x0, 0xb, 0x3, 0xfd, @remote}, 0x37a) sendmmsg(r5, &(0x7f0000001380), 0x40003ad, 0x2000000) 03:33:35 executing program 2: r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x7}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0xffffffffffffffaf) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)='*', 0xb0}], 0x1}, 0x0) 03:33:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x5}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000200)=@hopopts={0x0, 0x0, [], [@pad1]}, 0x10) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 03:33:35 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f98714b49362d82125314ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab104621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000"], 0x81) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffe3a}, 0xffffffffffffff20) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff02000000000000000000000000002100000000000000c0", 0x31}], 0x1}, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000001200)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 03:33:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa9346671b95be030, 0xe0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup(r0) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r6, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={r6, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000000)={0xe5b0, 0x0, 0xd93d, 0x0, 0x0, "bade6cfdf077946727eb69b4a16f6530366f5b"}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 744.458954] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.466236] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.509828] device K left promiscuous mode 03:33:44 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x3a9) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r5, 0xb05d, 0x10}, &(0x7f0000000140)=0xc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000300)=ANY=[], 0x0) sendto$inet(r0, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vxcan1\x00', 0xf) dup2(r0, r0) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) 03:33:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000140)={0xd, 0x401}) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000000c0)='net/protocols\x00') syz_open_procfs(r3, &(0x7f00000001c0)='smaps\x00') getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000002400)=ANY=[@ANYRES64, @ANYRES64=r2, @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYPTR, @ANYRESOCT], @ANYRESOCT, @ANYBLOB="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"], &(0x7f0000000080)=0x6) r4 = getpid() syz_open_procfs(r4, &(0x7f00000000c0)='net/protocols\x00') r5 = syz_open_procfs(r4, &(0x7f0000000080)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000200)=0xffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@mcast2, 0x47}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket(0x22, 0x2, 0x2) bind$isdn_base(r7, &(0x7f0000001140), 0x6) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, &(0x7f0000000240)=@gcm_256={{0x303}, "2bb600", "e825ab631ce6ec3f464a007043dab28ed6bd5ca8c145358cf16247a4451a623d", "7e591f29", "2a9783589843960e"}, 0x38) recvfrom$inet6(r6, &(0x7f00000002c0)=""/203, 0xcb, 0x10040, &(0x7f0000000040)={0xa, 0x4e20, 0x7ff, @mcast1, 0x3}, 0x1c) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup(0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) r8 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f0000000400)={'nat\x00'}, &(0x7f0000000480)=0x78) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 03:33:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:44 executing program 0: setitimer(0x0, &(0x7f0000000000)={{0x40000000000000}, {0x0, 0x10000}}, 0x0) r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) r1 = socket(0x2b, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0xfff, 0x1}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r2, 0x200}, &(0x7f0000000180)=0x8) 03:33:44 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000340)={0x0, 0x73, &(0x7f0000000000)=[{&(0x7f0000000040)="5500000018007f5300fe01b2a4a280930a600200ffa84308910000003900080008000a00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x221}], 0x1}, 0x4000) [ 751.639438] IPv6: Can't replace route, no match found [ 751.644074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.669909] IPv6: Can't replace route, no match found 03:33:45 executing program 0: r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) set_thread_area(&(0x7f00000003c0)={0xfffffffe, 0x800, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x46003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380)='fou\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) io_submit(r3, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) getresgid(0x0, &(0x7f0000000080), &(0x7f0000000240)) r5 = socket(0x22, 0x2, 0x2) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000300)=0x4) bind$isdn_base(r5, &(0x7f0000001140)={0x22, 0x0, 0x0, 0x5, 0x3}, 0x6) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000340)=0x3f) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000300000000000000", @ANYRES32=r9, @ANYBLOB="00000000000000000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x18, r9, 0x33}, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @l2tp={0x2, 0x0, @multicast2, 0x3}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)='veth1\x00', 0x0, 0x0, 0xa5}) 03:33:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000c00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r4, r4}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) gettid() set_mempolicy(0x3, &(0x7f0000000140), 0x10000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/checkreqprot\x00', 0x609000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r8, 0x3) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000100)={0x0, 0x80000000, 0x4, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000005c0)={0x9d0000, 0x0, 0x20, r7, 0x0, &(0x7f00000001c0)={0x5004b2, 0x0, [], @p_u32=&(0x7f0000000180)=0x6901}}) accept$unix(r9, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) setsockopt$inet_group_source_req(r11, 0x0, 0x2b, &(0x7f0000000240)={0x3, {{0x2, 0x4e24, @rand_addr=0x3f}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm_plock\x00', 0x105000, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000700)={0x0, 0x0, 0xffffffff, 0x7}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) bind$netlink(r10, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000080), 0x4) sendmsg(r12, &(0x7f0000000b80)={&(0x7f0000000780)=@rc={0x1f, {0x0, 0x4, 0x5, 0x0, 0x8, 0x3f}, 0x2}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000800)="232c43ec16e122920d69b785f3093a098bf69d6559507a28b2a272f0c05048b2791882e191ddf07a9af914a1ee86aeefa12e419813ac4a52552bf805064291e70b63b20dd5db7dc36e737435dae9c4660888dbe94fe6a1b0c393a9006d27f34e6c2c93b608c1c8f269e4cb723579159506446b9a5342839be606464c1a741072d271b06d8618f8879e6b949c3a874a57b8586126bf763d", 0x97}, {&(0x7f00000008c0)="87267c371eaa1e207e6da87a349d285d2483afebf895e1d5e23681d5beb18c29b9d2fd65e3eb7293c96554c76dbb5f8fd86fd3b032aadd3f666b0533bac26b785645ae1f838332f378f092d65d9084b5332a653220b1c76a59e0e049b4ab890057354381c363204690b5407aeba8e164ef29111c609ca5ef732ff61a5d34961ae4d527177d00d66af585a8c5a8ecbc23d1bfc85811be97faabb5b712c98deb93db696ad58f1b9c487e25649c1043cb351b56d11a390f1f0b79fc262a97768e895627e3762de14a5ba38d2ecbaf58996e0f884d159bd694d709f3", 0xda}, {&(0x7f00000009c0)="0e80e4eeb3b034321c0c007eb495230ba38e14e6b5f5dc3ccd66d09017cea1309a", 0x21}, {&(0x7f0000000a00)="368b32731ca7f2aa5b8b07785b05d829b7895fc46233f619e959577f4d57ddcbb5a4e6de8028d9023b855a23c17b5cd0268308dd442a09070399", 0x3a}, {&(0x7f0000000a40)="357da453f5e05fa088d09c61a0c1a2e9d970cf91048602e6f579cd7e70fa5796104708a121abb00338d59edce8808995b92627f8694607a2886b9af301c19f3be3bc26a7873cfb3c13263302c9561b3856a05719018b687fa3533f8450c7deca3b7e255b6f8207fd038c9b9b29e861", 0x6f}, {&(0x7f0000000ac0)="9d4ce8b6d4fef4fdcf96c0506e0c1a8c6cf44424b25d3b63f7", 0x19}, {&(0x7f0000000b00)="bca5df460e49301d7fb8d7e7c0fcdea8f462fb0b5ecfd996c715ee16b89bd0283dbc089585dc3a5f24d44a4e999160df7660ce8719edf886c3483019dd65f34b649f0dc46514204f", 0x48}, {&(0x7f0000001c80)="82dbf9412db73ceeafd897de7cad308ec6ad21aa214ae931224f012eb97be4c49473567d08f60ac7c2a8eb9b937ab0b5da768d1b91721edaca1adfdb403817f8e9f65cd8de15f5c360974bc82330200774e675f9a49780f435cbb78d1a4092d91a0c20b1a63116bf72f8245e4d31793652d1eeba6f7cfecbbc2bfa58bae6d97b7a923835831986b1ace60639840f9a721b44d15aad5763806fa98b8e9033cf675d6d7be5", 0xa4}], 0x9, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x3388}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) 03:33:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 751.821803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pig=19850 comm=syz-executor.0 03:33:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x4cb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) r2 = socket(0x22, 0x2, 0x2) bind$isdn_base(r2, &(0x7f0000001140), 0x6) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000280)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9, 0xfffffffffffffc00, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}) r3 = socket(0x22, 0x2, 0x2) bind$isdn_base(r3, &(0x7f0000001140), 0x6) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r0, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC=r4], @ANYPTR, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r3], 0xb}}, 0xb0) 03:33:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x500]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 751.924132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 752.075830] audit: type=1400 audit(2000000025.420:120): avc: denied { bind } for pid=19892 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:33:45 executing program 2: perf_event_open(&(0x7f0000000600)={0x1, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x801, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/nvram\x00', 0x20000, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={r5, 0x9, 0x1000}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001100)=@sack_info={r5, 0x0, 0x3}, &(0x7f0000001140)=0xc) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2002, 0x0) syz_extract_tcp_res(&(0x7f0000001200), 0x1, 0xe7) dup2(r0, r6) clock_gettime(0x6, &(0x7f0000000000)) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x441, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r8) write$UHID_INPUT(r7, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) bind$unix(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f00000011c0)={r9, r10/1000+10000}, 0x10) dup(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) 03:33:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0x7000}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffed7, 0x200848d5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:33:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x600]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)="08000000000000003759540d01ab3409", 0x10, r1) mount$9p_fd(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000640)={0x5, [[0x122, 0x0, 0x7, 0x1, 0x9, 0x8, 0xf8, 0x8], [0x5, 0x7fffffff, 0xfd7, 0x0, 0x1ff, 0x9, 0x0, 0x40], [0x6, 0x2161763c, 0xff, 0x93, 0x1f, 0x69e6, 0xcf, 0x1]], [], [{0x2, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x3ff, 0x6, 0x1, 0x1}, {0x8000, 0x4, 0x1}, {0x2, 0xfffffff9, 0x1, 0x0, 0x1, 0x1}, {0xd16, 0x3, 0x1}, {0xbd, 0x7f, 0x0, 0x1, 0x1, 0x1}, {0x90, 0x92f, 0x0, 0x0, 0x1}, {0xfffffff8, 0x6, 0x0, 0x1}, {0x3, 0x93, 0x0, 0x1, 0x0, 0x1}, {0x200, 0x7e, 0x1, 0x0, 0x1}, {0x6, 0x10001, 0x0, 0x0, 0x1}], [], 0x7ff}) [ 752.566917] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:45 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x900]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:46 executing program 3: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x31b800, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xf1f5}, {0x800, 0x1}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3507, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0x8) 03:33:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x2) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000080)={0x7, 0xa8, 0x400, 0x6, 0x2, 0x1, 0x0, 0x4}, &(0x7f00000000c0)={0x2, 0x1, 0xfffffffffffffffb, 0x3, 0xfffffffffffffff8, 0xfff, 0x2, 0x1}, &(0x7f0000000100)={0x7fff, 0xffffffffffffff7f, 0x401, 0x81, 0x80000000, 0xffffffffffffffff, 0x401, 0x1000}, &(0x7f0000000140), &(0x7f0000000240)={&(0x7f0000000200)={0x3}, 0x8}) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) getpeername$l2tp(0xffffffffffffffff, 0x0, 0x0) 03:33:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xa00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:46 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xfd08283856736a22) setuid(r1) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x7) r3 = socket(0x22, 0x2, 0x2) r4 = socket(0x22, 0x2, 0x2) bind$isdn_base(r4, &(0x7f0000001140), 0x6) r5 = dup2(0xffffffffffffffff, r4) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) bind$isdn_base(r3, &(0x7f0000001140), 0x6) recvmsg$can_raw(r3, &(0x7f00000002c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/107, 0x6b}], 0x1, &(0x7f00000001c0)=""/253, 0xfd}, 0x40020002) [ 752.834576] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xb00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xc00]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 753.057167] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x40) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000001180)=@ethtool_per_queue_op={0x4b, 0x2, [0x3f, 0x8, 0xffff6648, 0x3ff, 0x3f, 0x1, 0x0, 0xc7, 0x7fff, 0x2, 0x6, 0x305, 0x7f, 0x7, 0x4, 0x3f, 0x1, 0x0, 0x6, 0x200, 0x2, 0x40, 0x80, 0x21, 0x200, 0xba, 0x6, 0x7, 0x80, 0x400, 0xd99, 0x4, 0x0, 0x80, 0x1ff, 0x1, 0x7fff, 0x0, 0xfff, 0x5, 0x7fff, 0xf8, 0x0, 0x800, 0x9, 0xe, 0x6, 0x0, 0x0, 0x100, 0xb91, 0x0, 0x4, 0x4, 0x7, 0x2, 0x8, 0x4, 0x8e3, 0x80000001, 0x8, 0x9, 0x0, 0x3ff, 0x6, 0x4, 0x64, 0xff, 0x8, 0x1, 0x101, 0x200, 0x2, 0x3f, 0x7, 0x400, 0x0, 0x9, 0x1, 0x8, 0xffff4502, 0xefa0, 0x3, 0x7, 0x9, 0x9, 0x6, 0x9, 0x5, 0x8000, 0x6, 0x7f, 0xffffffff, 0x0, 0x1f, 0x8, 0xac, 0x7, 0x7, 0xa943, 0x4, 0xffffffbe, 0x4, 0x1, 0x74daf4d0, 0x7, 0x5, 0x8, 0x0, 0x4, 0x20, 0x6, 0x9, 0x8000, 0xfff, 0xa5, 0xf665, 0x5ab98572, 0x8001, 0x6, 0x9d2, 0x101, 0x7, 0x2, 0x8, 0x5, 0x4, 0x80000001, 0x9, 0x3ff, 0x6, 0x6, 0x4, 0xfffffffb, 0x18, 0x4, 0xff, 0x3, 0x87, 0x20, 0xfb, 0x4, 0x5, 0x1f, 0x1, 0x6, 0x3, 0x2, 0x8, 0xffffffff, 0xd2, 0x4, 0x80000001, 0x1, 0x2, 0x6, 0x0, 0x4e, 0x7, 0x5, 0x3, 0x6, 0x4e, 0x7, 0x0, 0xb3c, 0x7, 0x0, 0xa9, 0x6, 0x4, 0x6, 0x3, 0x7c, 0x101, 0x0, 0x6, 0x3, 0x80, 0x2, 0xfffffffe, 0x7, 0x4, 0x700, 0x0, 0x0, 0x3f, 0x1, 0xffffffff, 0xff, 0x2, 0x7ba, 0x1f, 0x0, 0x9, 0x1, 0x2, 0xff, 0x3, 0x8630, 0xb2c, 0x1, 0x6, 0x6, 0x8, 0x21, 0x9, 0x8, 0x1ff, 0x5, 0xff, 0x8816, 0x6c2, 0x401, 0xbf, 0xc37b000, 0x3, 0x6, 0x80000000, 0x3, 0x4, 0x48329ea8, 0x52, 0x81, 0x7f, 0x1559, 0x6, 0x0, 0x3, 0x3, 0x0, 0x1, 0x2, 0x1, 0x7ff, 0x10000, 0xaad2, 0x5bc5, 0x3, 0x4, 0x80, 0x2, 0x6, 0xfffffff7, 0x7fffffff, 0x0, 0x1b, 0x1, 0x56, 0x4, 0xc2, 0x1, 0x8, 0x3, 0x14f43374, 0x3f, 0x2, 0x2, 0x800, 0x80000000, 0x7, 0x423, 0x101, 0x46, 0xa52, 0xfffff800, 0x1, 0x4cb1cea1, 0x0, 0x36, 0x1000, 0x1, 0x9, 0x80000001, 0x1, 0x8, 0x0, 0x9, 0x7, 0x6, 0x9, 0x6, 0x10001, 0x6, 0x4, 0x6, 0x1, 0x3, 0x10000, 0x8001, 0x4000000, 0xc73a, 0x400, 0x3ff, 0x1, 0x2, 0x5, 0x7f, 0x5, 0x6, 0xfff, 0x8000, 0x522, 0x10000, 0x2, 0x999b, 0x9, 0x7f, 0x6, 0x3, 0x2, 0xff, 0x0, 0x8001, 0x1, 0x6ff9, 0x72, 0x3, 0x101, 0xff, 0x5, 0x5, 0x0, 0x6, 0x9, 0xffffffff, 0x8, 0x1, 0x6, 0x61, 0x7fff, 0x0, 0x2, 0x20, 0x6, 0x6, 0x6, 0x9, 0x5, 0x2400000, 0x0, 0x40, 0x0, 0x2, 0x20, 0x2, 0x87, 0x3, 0x2, 0x1, 0x37c, 0x8, 0x7a74344d, 0x2, 0x7fff, 0xfffffff7, 0x4, 0x7, 0x3, 0x3, 0x1000, 0x200, 0x8, 0x80000000, 0x38841dcd, 0x3, 0x7, 0xffffffff, 0xfff, 0x50f, 0x43, 0x7, 0x4f7, 0x58d5, 0x4, 0x3f, 0x34d, 0x1, 0x9, 0x10001, 0x3, 0x55, 0x9, 0xfffffffe, 0x400, 0xef4, 0x1, 0xfffffffd, 0x80, 0x7fffffff, 0x787, 0xc11, 0x4, 0xfffff02e, 0x4, 0x4, 0x10000, 0xc8, 0x8, 0x6, 0x7fff, 0x6, 0x3f, 0x3, 0x7, 0x400, 0x9, 0x6, 0x120, 0x5c, 0x8001, 0x8, 0x7, 0x5, 0x4, 0x7, 0x2, 0x3f, 0x1, 0x3c84, 0x2, 0x1, 0x101, 0x1, 0x7, 0x30c, 0x4, 0x10000, 0x8, 0x6, 0x3, 0x4, 0x1, 0x1, 0x10001, 0x1, 0x1ff, 0x40, 0x40, 0x6, 0x8001, 0x0, 0x3, 0xe1, 0x6, 0x7, 0x5d9, 0x7fffffff, 0x74, 0x6, 0x2, 0x4, 0x5, 0x7, 0xadc0, 0x7fff, 0x10001, 0xb17, 0x669, 0x58d, 0x8001, 0x7fff, 0xfffffff7, 0x980b, 0xffff7fff, 0x9, 0x7ff, 0x6, 0x101, 0x9, 0x58f5938d, 0x1000, 0x4, 0x0, 0x4, 0x800, 0x8001, 0x80000000, 0xea5, 0x3ff, 0x10000, 0xffffffff, 0x6b05, 0x6322, 0x4, 0x7fffffff, 0x6, 0x3, 0x3f, 0x7ff, 0x1f, 0x5, 0xa, 0x0, 0xb3, 0x2, 0x40, 0x101, 0xc1, 0xfff, 0x800, 0x6, 0x0, 0x0, 0x101, 0x2, 0x6, 0x6, 0x0, 0x8, 0x9, 0x7, 0x2d, 0x3ff, 0x6, 0x1, 0x80000001, 0x7, 0x1ff, 0x7, 0x1000, 0x7, 0x3, 0x8, 0x9, 0xace, 0x5, 0x3, 0x6, 0x14, 0x14119622, 0xd846, 0x200, 0x10000, 0x800, 0x7, 0x7f, 0xffffffda, 0x7, 0x94, 0x3c826eb3, 0x1, 0x225, 0x0, 0x0, 0x0, 0x9, 0x8, 0x9, 0x7f, 0x7, 0x7, 0x80000000, 0x200000, 0x400, 0x4, 0x4, 0xe636, 0x5, 0x7, 0x3, 0x1000, 0x5, 0x5, 0xbbd3, 0x0, 0x3, 0x8, 0x0, 0x9, 0x9, 0x80000000, 0x3, 0xfffffeff, 0xa4, 0x20, 0x9, 0x310, 0xc1b, 0x40, 0x3f, 0x8, 0x8001, 0x1, 0x4, 0xfffffffe, 0x3, 0x2, 0x0, 0x3, 0x2, 0xff, 0x200020, 0x884, 0x2, 0x80000000, 0x8, 0x7, 0x1, 0x10001, 0x0, 0x3, 0xfbc3, 0x401, 0x4, 0x7b1d, 0x4, 0x5a, 0x9f, 0x4e9f, 0x1, 0x80, 0x8, 0x9, 0xffff, 0x7, 0x7fffffff, 0x1, 0x9, 0x3, 0x9, 0x7fffffff, 0x2, 0x7, 0x6, 0x9, 0xfff, 0x401, 0x5, 0x4, 0x6, 0x18000000, 0x401, 0x7, 0x81, 0x4d14d798, 0x7, 0xffffffff, 0x2, 0x3, 0x1, 0x2e5, 0x41b9, 0x7, 0x6, 0x6, 0x9, 0xbc, 0x6, 0x93b, 0x1, 0xf803, 0x9, 0x8, 0x625, 0x9, 0xe210, 0x3, 0x4c82, 0x400, 0xd85, 0x2a2e, 0x7, 0x5, 0xbe19, 0x0, 0x8, 0x1000, 0xffff, 0x17ff, 0x11bdceeb, 0x6, 0x3, 0x5, 0x9, 0x0, 0x5, 0x4, 0x1, 0x5, 0x4, 0x3, 0xfff, 0x1, 0x6, 0x1f, 0x40, 0x0, 0x17f6, 0x5, 0x8000, 0x1, 0xad, 0x4, 0xfffffffe, 0x200000, 0x2, 0x3, 0x9, 0x101, 0x8d3, 0x1, 0x9, 0x2, 0x7, 0x9, 0x8, 0x3f, 0xfffffbff, 0xffffffea, 0x4, 0x85, 0x400, 0xffff, 0x6, 0x1, 0x3, 0x8, 0x3, 0x2, 0x4, 0x5, 0x3, 0x3, 0x3b, 0x7fff, 0xfffffffa, 0x1, 0x20, 0x4, 0x1, 0x3, 0x5, 0xfffff800, 0x2, 0x20, 0x8000, 0xfffffffe, 0xe0, 0x8, 0x123c, 0x200, 0x1, 0x800, 0x1f, 0x3, 0x0, 0x3f, 0x7ff, 0x10000, 0x8000, 0xc931, 0x8000, 0xb1, 0x5, 0x9, 0x5, 0x83, 0x4, 0xffff8001, 0x3f, 0x2, 0x20, 0x8, 0x6, 0x40, 0x8b4, 0x10001, 0x6, 0x2, 0x7, 0x5, 0x4, 0x3b4f049b, 0x7, 0x0, 0x0, 0x6, 0xffffffff, 0x80000000, 0x8609, 0x5, 0xffff, 0x1, 0xabe9, 0x1, 0xe6c, 0xfffffe52, 0x6, 0x7, 0xffffffff, 0x7, 0x2, 0x7, 0x1, 0xff, 0x5, 0x4, 0x10001, 0x101, 0x9, 0x5, 0x3d51, 0xbede, 0x0, 0x3, 0x7, 0x1f, 0x6, 0x9, 0x0, 0x4, 0x6, 0xff0000, 0x10000, 0x1762, 0x72, 0x9, 0x401, 0x1000, 0xbc, 0xe5, 0x4dfa, 0x9, 0x6d3, 0x3, 0x7fffffff, 0x3f, 0x101, 0xf200, 0x7c, 0xffffffff, 0xd1, 0x1, 0x0, 0x40, 0x156, 0x1, 0x0, 0x2, 0xce06, 0x7fffffff, 0x1ff, 0x20a, 0x5, 0x4, 0x1f, 0x4, 0x6, 0x0, 0xffffffa9, 0x0, 0x9, 0x12f, 0x1b, 0x6, 0xffff, 0x800, 0x1000, 0x9, 0x6, 0xc530, 0x3, 0x7, 0x7fff, 0x6f257ab, 0x6, 0x26, 0x10000, 0x1, 0x8, 0x400, 0x1, 0xff, 0xc410ba6, 0x81, 0xfffff801, 0x1, 0x7ff, 0x1, 0x9, 0x8, 0xfffffffc, 0x8000, 0xfffffff8, 0xffffff39, 0x1, 0x6a7, 0x1, 0x2, 0x0, 0x80000000, 0x5, 0x1ff, 0x10001, 0x4ff, 0x0, 0x61cbb470, 0x800, 0x8a9, 0xffffffff, 0x3, 0x8, 0x3ff, 0xffff, 0x8, 0x6, 0x0, 0x8, 0x1000, 0x9, 0xffffffe8, 0x761, 0xe4bc, 0x2, 0x4, 0xff, 0x8001, 0xfffffff7, 0x1, 0x10001, 0x7, 0xfffffffb, 0xf26, 0x800, 0x10001, 0x7ff, 0x1, 0x1f, 0xfffffffd, 0x1, 0x0, 0xfffffffa, 0x1f, 0x990, 0x8, 0x80000000, 0xf2cc, 0x6, 0xc99a, 0xfffff546, 0x3, 0x7b1a, 0x8, 0x20, 0x1, 0x94, 0x3, 0x878b, 0x800, 0x8, 0xba7, 0x6, 0x3, 0x8, 0x4, 0x279d, 0x6, 0xffff, 0x26, 0x7ff, 0x401, 0x1, 0x4, 0xfffffffb, 0x8, 0x89ce, 0x9, 0x4, 0x2, 0x7, 0xbe90, 0x1, 0x20, 0x74, 0x1, 0xfffffffa, 0x8, 0x1000, 0x3f, 0x9, 0x30, 0x84, 0x8, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x80000000, 0x401, 0x29, 0x100, 0x8, 0x40, 0x1, 0x3, 0xfff, 0x2, 0xb0, 0x80, 0x7fffffff, 0x8, 0x9, 0x4, 0x8, 0x5, 0x902, 0x92, 0x80000001, 0x5, 0x7, 0x1, 0x80, 0x100, 0x0, 0x5, 0xce0, 0x67ea1034, 0x2f, 0x0, 0x4, 0x8, 0x200, 0x1ff, 0x9, 0x8001, 0xffffffe1, 0x6, 0x2, 0x0, 0x5, 0x6, 0x20, 0x7, 0x2, 0x7, 0x1000, 0xfda, 0x8, 0xfffffffc, 0x80000001, 0xaae, 0x2, 0xb46, 0x7ff, 0xfffffff7, 0x8001, 0x100, 0x0, 0x5, 0x0, 0x0, 0x5, 0xbf0d, 0xffffff59, 0x6, 0x3, 0x7, 0x10000, 0xffffffff, 0x5, 0x9, 0x268, 0x8000, 0x40, 0xd098, 0x4, 0xa7, 0x7fffffff, 0x80, 0x80000001, 0x2e2, 0x7fff, 0xffffffe0, 0x100, 0x3, 0x1, 0x1ff, 0x39c, 0x1b71, 0x4, 0x74, 0x107a6f03, 0x9, 0x80000000, 0x81, 0x398, 0x8, 0x8000, 0x5, 0x3, 0x2, 0x5, 0x2, 0x5, 0x4, 0x9, 0x8000, 0x6, 0x81, 0xa3, 0x3, 0x6, 0x80000000, 0x5, 0xdf, 0x0, 0x4000, 0x4, 0xb98d, 0x2, 0x4, 0x6634, 0x6, 0x80, 0x3, 0x80000001, 0xfffffffd, 0x1c00, 0x6, 0x3, 0xcaa, 0x5, 0x9, 0x9, 0x4, 0x3ff, 0x3c, 0xd8b4, 0x80, 0x0, 0x1, 0x97, 0x9, 0x2, 0x7fff, 0x401, 0x6, 0x7, 0x5, 0x9, 0x81, 0x0, 0x0, 0x2, 0x8, 0x4, 0x7, 0x3, 0x9b, 0xfffffff9, 0xe11, 0x7, 0x1f, 0xffffa81d, 0xbc9, 0x80, 0x6b6, 0xffff, 0x1f, 0x1000, 0x7, 0x4, 0x3b4, 0x7, 0x5, 0x4, 0x8, 0x0, 0x7, 0x8, 0x6, 0x9, 0x0, 0x7, 0x3, 0x6, 0x4, 0x7, 0x9, 0x340, 0x20, 0x62cd, 0x8, 0x400, 0x80000000, 0xb, 0x28000000, 0xe96, 0x5, 0x2134, 0x0, 0x8, 0x7, 0x4, 0x20, 0x8, 0x5, 0x1800000, 0x200, 0x0, 0x1f, 0x1f, 0xffffff03, 0x1, 0x7fff, 0x3e, 0xfff, 0x8ed4, 0x7, 0x0, 0x7, 0x0, 0xdc, 0x400, 0x0, 0x3, 0xfff, 0x2, 0x4, 0x6b, 0x30a, 0x80000000, 0x1, 0xffffff80, 0x8, 0x8, 0x20, 0x81, 0x3f, 0xfffffffb, 0xa000, 0x6, 0x8, 0xd4, 0x2, 0x60, 0x101, 0x8, 0x1, 0x7, 0x7, 0x100, 0xffffffb2, 0x5, 0x8f8, 0x3, 0x401, 0x8, 0x1, 0x6, 0x0, 0x6, 0x1, 0x0, 0x8, 0x7, 0x0, 0x4, 0x80000001, 0x1000, 0x7ff, 0x4b2, 0x9, 0x7, 0x95, 0x7, 0x7, 0x80, 0x800, 0x40, 0x1, 0xffff, 0x5, 0x5, 0x400, 0x6, 0x4735, 0x6, 0x2, 0x200, 0x4, 0x8, 0x6, 0x6, 0xb4, 0x6, 0x5, 0x0, 0x9, 0xc02, 0x7fffffff, 0x3, 0x0, 0x1, 0x9, 0x5, 0xfbf6, 0x2c6, 0x8001, 0xabc5, 0x401, 0xffffffff, 0xffffffc0, 0x401, 0x4, 0x3, 0x3, 0x9, 0x5, 0x4, 0x0, 0x80000000, 0x0, 0x6, 0x7, 0xff, 0x3, 0x5, 0x2, 0x80000000, 0x7, 0x18, 0x7fff, 0x1, 0xfd5, 0x800, 0x7, 0x57f, 0x56, 0x81, 0x3501, 0x800, 0x5290000, 0x401, 0x40, 0x1ff, 0x0, 0x2, 0x1, 0x101, 0x7, 0x4, 0x2d61, 0x81, 0x7fffffff, 0x0, 0x3, 0x0, 0x198, 0xd, 0xfffffffb, 0xfc, 0x2, 0x200, 0x2, 0x9, 0x5e, 0x10000, 0x2e3fc65c, 0xffffffff, 0x80000001, 0x1ff, 0x5cb, 0xffffffff, 0x7, 0x6, 0xff, 0xe240000, 0xc7b5, 0x1000, 0x2, 0xc1bb, 0x5, 0x2b, 0x6, 0x9, 0x200, 0x7b2d8bac, 0x3f, 0x6, 0x3f, 0x1, 0xfffff2c1, 0xcf9, 0x0, 0x5, 0x89, 0x88, 0x4, 0x0, 0x7, 0x7c, 0x0, 0x5, 0x7, 0x3ff, 0x20000000, 0x6, 0x100, 0xfffffeba, 0x0, 0x400, 0xffffff01, 0x4, 0x1, 0x8, 0x8, 0x7fff, 0x3, 0x6, 0x81, 0x7fffffff, 0x7, 0x0, 0x1, 0xffff, 0x10000, 0x0, 0x1, 0x8, 0x7, 0x0, 0x400000, 0x7, 0x4, 0x3, 0x7, 0x7, 0x89, 0x3, 0x4, 0x80000001, 0x2, 0xfffff801, 0x8, 0xfff, 0x40, 0x5, 0x3, 0xfffffffa, 0x1f3ad8e1, 0xa39, 0x20, 0x0, 0xfffffffe, 0xc0000000, 0x2, 0x61f8, 0x1, 0x40, 0x8, 0xff, 0x0, 0x1, 0x4, 0xdd81, 0x3, 0x6, 0x3f, 0x6, 0x23e4, 0x7, 0x4, 0x9, 0xffffffff, 0xf6, 0x9, 0xfffffffc, 0x1ff, 0x47, 0x0, 0x0, 0xb4, 0x8, 0x5, 0x5, 0x1, 0x3, 0xfffffff9, 0x7, 0x8000, 0x200, 0x9, 0x6, 0x5, 0x2, 0xfffffffb, 0x935, 0x3, 0x9, 0x401, 0x9, 0x9, 0x80000001, 0x8001, 0x4, 0x3ff, 0x3ff, 0x40, 0x1ff, 0xfffffff8, 0x7, 0xb07d, 0x8, 0x3, 0x80, 0x9fc4, 0x7a, 0x7, 0x101, 0x2, 0x49, 0x3, 0x8, 0x7, 0x5, 0x6, 0x3, 0x414, 0x3, 0x8, 0x8000, 0x3f, 0x8, 0x0, 0x80, 0x7, 0x9, 0xdb0, 0x2, 0x1, 0x3, 0xfffff801, 0x9, 0x1, 0x80, 0x7fffffff, 0x3ff, 0x7d76, 0x4, 0x3f, 0x1, 0x9, 0x5, 0x6, 0x6, 0x40, 0x768, 0x4, 0x0, 0x1c1ee000, 0x2, 0x7fff, 0x3, 0x0, 0x7fff, 0x8, 0xfffff7f3, 0x0, 0x401, 0x80, 0x800, 0x6, 0x6, 0x6, 0x800, 0x3fff8, 0x6, 0x400, 0x4, 0x9, 0x1, 0x8000, 0x62c80000, 0x7fff, 0x6b2, 0x2, 0x8, 0xfffffffd, 0x1, 0x1, 0x6, 0x0, 0x6, 0x1ff, 0x70, 0x6d25d3e, 0x8001, 0x80000001, 0x5, 0x4, 0x5, 0x8, 0x8, 0x9, 0x6, 0x80, 0xe44, 0x7, 0x80000000, 0xff, 0xa18, 0x8c, 0x5, 0x80000001, 0x183a000, 0x8000, 0xffffffe0, 0x401, 0x20, 0x8, 0x8, 0x3, 0x9, 0x100, 0x80000001, 0xfffff66b, 0x7, 0x3, 0x4, 0x80000000, 0x95db, 0x400, 0x1, 0x7, 0xc71, 0x9, 0x1, 0xa80, 0x1, 0xc8a, 0xd5d, 0x400, 0x101, 0x40, 0x7f37ccfd, 0x4da, 0x7fffffff, 0x8, 0x1, 0x1ff, 0x7, 0x40, 0x8001, 0x8, 0x9, 0x80000000, 0x10001, 0x2, 0x9, 0xfffffffe, 0x8, 0x80, 0x2, 0x0, 0x3, 0xfffff800, 0x5, 0x8, 0x6, 0x10000, 0x400, 0x1, 0x7, 0xff, 0x0, 0x3f, 0x8, 0x8, 0x0, 0x0, 0xfffffffd, 0x8, 0xffffffe0, 0x5, 0x10000, 0x200, 0xa8d, 0xdbf2, 0x0, 0xffff54b7, 0x6, 0x1, 0x4, 0x8, 0x7, 0x9, 0xfffffffe, 0x3f, 0xfc, 0xaa9a, 0x1, 0x6, 0x10000, 0x9, 0x3, 0x10001, 0x80000001, 0x1ff, 0x3f, 0x2, 0x2, 0x63a1cec0, 0x7, 0x4, 0x5, 0x8, 0x4, 0x6c4, 0x2, 0xffff8fa6, 0xd7, 0x5e3, 0x1ff, 0x401, 0x5, 0x3, 0x7, 0x2, 0x1, 0xffffffe0, 0xfffffffc, 0x2d5, 0x1, 0xffffff80, 0xa5, 0xe00000, 0x6, 0x0, 0x70f, 0x9, 0x1ff, 0x7, 0xcf52, 0x80, 0x9, 0x0, 0x637f, 0x0, 0x2, 0x4, 0xfffffc01, 0x0, 0x7, 0x3ed, 0x8, 0x3, 0x101, 0x1, 0x27f5, 0x8, 0x8, 0x1, 0x200, 0x2, 0x7, 0xff, 0x20, 0x4, 0x18, 0x2, 0x6, 0x79, 0xbef3, 0x8001, 0x9, 0x1, 0x6, 0x1, 0x10000, 0x3ff, 0x5, 0x7, 0x10001, 0x5, 0x3ff, 0x10000, 0x1, 0x1, 0x7, 0x7, 0x100, 0x80000001, 0x80, 0x7, 0x1, 0x8, 0xc01d, 0x6, 0x3ff, 0xb2, 0x2a, 0xb22, 0x8, 0x9, 0x6, 0x3, 0x1, 0x7, 0x9e5, 0x3, 0x5b, 0x6, 0x8001, 0x9, 0xe62, 0x7, 0x43c, 0x3, 0x3f, 0x7, 0x4, 0x5, 0xff, 0x8, 0x8000, 0x6, 0x7fff, 0x4, 0x506, 0x6, 0xe8db, 0x0, 0x9, 0x2, 0x7fffffff, 0x0, 0x7f, 0x3f, 0x3ff, 0x8000, 0x8000, 0x808, 0x87, 0x21, 0x6, 0x3, 0xffffffff, 0x800, 0x4, 0x1ff, 0x7ff, 0x3, 0x339, 0x5, 0x101, 0x10000, 0x1f, 0x3ff, 0x0, 0x7fffffff, 0xc69a, 0xff, 0x80000000, 0x20, 0x9, 0x2, 0x9, 0x8, 0x80000000, 0x0, 0x1, 0x20, 0x5, 0x3, 0x0, 0x5, 0x4, 0x5, 0xa42, 0x8, 0xfffffffe, 0x80000001, 0x100, 0x7, 0x0, 0x0, 0x3ff, 0x0, 0x4a, 0x400, 0x3ce88ab4, 0x9, 0x50, 0x3, 0x400, 0x7, 0x80000001, 0x4, 0xffffff7f, 0x1, 0xf242, 0x7, 0x5, 0xfff, 0x1, 0x40, 0x83, 0x40, 0x7, 0x8, 0xffffffff, 0x9, 0x9, 0x2, 0x6f6, 0x5, 0xfff, 0x4, 0x2, 0x4, 0x80, 0x8, 0x3f, 0x9, 0x3, 0x8cc8, 0x9, 0x2, 0x4, 0x6885, 0x80000000, 0x9982, 0x81, 0xff, 0x1e1, 0x8, 0x7, 0x100, 0x988, 0x3ff, 0x1, 0x0, 0xffffffff, 0x100, 0x3, 0x1, 0x4, 0x7fffffff, 0x3, 0x7, 0x2, 0x5, 0x3, 0x1fe, 0x5, 0x5, 0x7, 0x4, 0x40000, 0xffffffe0, 0x18d2, 0x4, 0x100, 0x8, 0x0, 0xff, 0x3, 0x0, 0xda, 0x1, 0x1841, 0x8000, 0xf69, 0x0, 0x5, 0x9, 0x2, 0x7, 0x0, 0x0, 0x3f, 0x7, 0xd87, 0x6, 0x3, 0x8, 0x6, 0x3, 0x7, 0xb94d, 0x9, 0x1, 0x7, 0x71, 0x40, 0x80000001, 0x0, 0x1, 0x1ff, 0xfffffffd, 0x200, 0x1, 0x7, 0x400, 0x2, 0xffff8000, 0x0, 0x2, 0x1, 0x3, 0x3ff, 0x2, 0x7fff, 0x1, 0x6, 0x5, 0x5, 0xfec, 0x40, 0x3d, 0x5, 0x4, 0x53, 0x2, 0x5, 0x7fff, 0x4, 0xe116, 0x3, 0x3f, 0x82bd, 0x3, 0x1, 0x6, 0xffffffff, 0x101, 0xffffffff, 0x1, 0x5, 0x80000000, 0x4, 0x5, 0x77939720, 0x4, 0x7fffffff, 0x1f, 0xb1c, 0x0, 0x80000001, 0x2, 0x4, 0x3ff, 0x3, 0x40c, 0xfff, 0x4240, 0x6, 0x24, 0xac9, 0x7f, 0x3, 0x78a, 0x6, 0x6, 0x80000000, 0xed63, 0x2, 0x3, 0x8, 0x40, 0x9, 0x5c688d3e, 0x0, 0x4, 0x1, 0x8000, 0x7fff, 0x9, 0x9, 0x10001, 0x5, 0x2a06, 0xd59, 0x800, 0x4, 0x9, 0x0, 0x21e, 0x9, 0x931, 0x3, 0x40, 0x1, 0x2, 0x9, 0xbf, 0x2, 0x20, 0x4, 0x7f, 0x4ef, 0x8, 0x1f, 0x272, 0x0, 0x0, 0x5, 0x10000, 0x317, 0x26, 0xffff480a, 0x200, 0xe1, 0x7, 0x81, 0x80, 0x9, 0x4, 0x5, 0x80, 0x8, 0xb3, 0x100, 0x9, 0x0, 0xd135, 0x200, 0xffff6ff5, 0xffffc497, 0x7, 0xee57, 0x6, 0x7b, 0x5, 0xfffff65c, 0x1842, 0xffffffff, 0x7ff, 0x6, 0x100, 0x401, 0x101, 0x1, 0x3, 0x3, 0xfffffff8, 0x71d, 0x2, 0x8, 0x8b, 0x3, 0x1, 0x6, 0x8001, 0x0, 0x4, 0x0, 0xffffffff, 0x2, 0x3, 0x75, 0x80000001, 0x2, 0x82, 0x8, 0xfef5, 0x1, 0xfffffffe, 0x1704, 0x0, 0x6, 0x8d7a, 0x3, 0x80000000, 0x5, 0x6, 0x40, 0xfff, 0x2, 0x1, 0x5, 0xfffffffd, 0x7, 0x401, 0x100, 0x1, 0x9, 0x4, 0xfff, 0x6, 0x3, 0x0, 0xffffffe0, 0x5, 0x8af0, 0x2, 0x77, 0x4, 0x100, 0xfe, 0x5, 0x7ff, 0x7, 0x61, 0x9, 0x1, 0x2, 0x6, 0x0, 0x7f, 0x7, 0x5, 0x0, 0x400, 0xfffffff3, 0x0, 0x9, 0xfffffeff, 0xfffffffb, 0xd2, 0x8, 0x0, 0x1, 0xfffffffa, 0x7990, 0x9, 0x3, 0x2c66, 0x3, 0x9, 0x10000, 0x9, 0x40, 0xffff8000, 0x4, 0x8, 0x8, 0x10001, 0x70000, 0xf3e1, 0x400, 0xfffffff9, 0xdb, 0x16, 0x1ff, 0x50, 0x9, 0x9, 0x100, 0x1ff, 0x8, 0x7ff, 0x1, 0x2, 0x6, 0x3f, 0x0, 0x0, 0x400, 0x6, 0x5dd, 0x8b, 0x90, 0x0, 0x800, 0x0, 0x3, 0x81, 0x0, 0x4a, 0x2, 0x80, 0x7fffffff, 0x20, 0x7f, 0xfffffc69, 0x6, 0x3, 0x20, 0x2, 0x6, 0x7, 0x4, 0xfffffffd, 0x5, 0x1, 0x0, 0x1, 0xf83, 0x400, 0x81, 0x7fffffff, 0x0, 0x2, 0x101, 0x8, 0x101, 0x3, 0x1ff, 0x101, 0x7, 0x3, 0x1, 0xb35, 0x8000, 0x3, 0x2, 0xfffff801, 0x2, 0x8, 0x1ff, 0xea, 0x80000001, 0x1, 0xbf4, 0x101, 0xffff, 0x6, 0x0, 0x4, 0x0, 0x2, 0x209, 0x0, 0x3, 0x6, 0x1, 0x1, 0x200, 0x1000, 0x80, 0x3f, 0x1144, 0x0, 0x3f, 0x5, 0x9e7, 0xfff, 0xf4, 0x8, 0x33, 0x101, 0x40, 0xffff, 0x77c6, 0x8, 0x80000000, 0x3869, 0x0, 0x1, 0xc50e, 0x80, 0x8, 0xa63a, 0x9388ad50, 0x3ff, 0x5b4, 0x3, 0x8000000, 0x2, 0x5, 0x7fff, 0xa18f, 0x800, 0x5, 0xbe, 0x1, 0x81, 0x1, 0x5, 0xfffffffb, 0x1, 0x0, 0x6, 0x0, 0x5, 0x3, 0x2, 0x8, 0x2, 0x200, 0x20, 0x5, 0x1, 0xe3, 0x400, 0x8001, 0x0, 0x101, 0x8, 0x3, 0x7f, 0x24a, 0x3, 0x1, 0xce8, 0x81, 0x2, 0x80, 0x7, 0x7fffffff, 0x101, 0x8aa3, 0x1, 0x487a, 0x20, 0x2, 0x7fff, 0x2, 0x2, 0xbc2b, 0x0, 0xfff, 0x9, 0x6, 0x100, 0xe2e, 0x5, 0x4, 0x6, 0x1ff, 0x6, 0x1f, 0x5, 0x1dced06b, 0x4, 0x800, 0x1000, 0x2, 0x6, 0x200, 0xfffffffb, 0xf3c, 0x5, 0x100, 0x8, 0x101, 0x4, 0xd72, 0x7fff, 0xffffffff, 0x0, 0xa0, 0x0, 0x9, 0x0, 0x8a4, 0x7, 0x0, 0x7, 0x1ff, 0x8, 0x2, 0x2, 0x8b00000, 0x8, 0x5, 0x4, 0x5, 0x5, 0x7, 0x5, 0x186a, 0x7, 0x40, 0x0, 0x7f, 0x1, 0x401, 0x4, 0x6, 0x400, 0x10001, 0x10001, 0x20, 0x80000001, 0x2, 0x10, 0x3, 0x7fff, 0x8, 0x8, 0x1, 0x40, 0x5, 0x7, 0x6, 0x7fff, 0x1f, 0x80000000, 0x1, 0x2be, 0x1, 0x401, 0x0, 0x6, 0x200, 0x1d00000, 0x80, 0x6a600, 0x9, 0x401, 0x7, 0x0, 0x3, 0x0, 0x0, 0x8001, 0x4c, 0x7, 0x5, 0x0, 0xfff, 0x5, 0x1000, 0x1, 0x5, 0x1, 0x0, 0x5, 0x1, 0x9, 0x80000001, 0x81, 0x9, 0x1, 0xff, 0x80000001, 0x5, 0x3, 0xce6, 0x200, 0x7, 0x2, 0x5, 0x48ca, 0x3ff, 0x4, 0xfffffff9, 0x9, 0x5c, 0x2, 0x2, 0x9, 0x4, 0x3, 0x9, 0xff800000, 0x2, 0x6, 0xff, 0x5, 0x3, 0x7, 0x0, 0x4, 0x5, 0x3, 0x37a, 0xf8000000, 0xffffa25a, 0x7, 0x433, 0x9, 0x9, 0x642, 0x2, 0x40, 0x80000001, 0x4, 0x4d, 0x4, 0xb7, 0x6bd2873e, 0x4, 0x16, 0xb8, 0x14000, 0x3, 0x8, 0x4, 0x89, 0x1, 0x8, 0x7, 0x3, 0x7fffffff, 0x8000, 0x0, 0x2ce, 0x1, 0x401, 0x0, 0x1, 0x1ff, 0x0, 0x1, 0x8, 0x40, 0x169, 0x0, 0x8, 0x5a, 0x6, 0x0, 0x2, 0x81, 0x200, 0x81, 0x0, 0x8, 0x1, 0x3ff, 0x2, 0x0, 0x1, 0x1, 0x7, 0xf33, 0x1, 0x4, 0xffffffc1, 0x7f, 0x50d9, 0x3e07, 0x8, 0xd042, 0x9, 0x100, 0x3, 0x9, 0x6, 0x2, 0x8001, 0x8, 0x7fffffff, 0x4, 0xaf, 0x9, 0x7, 0xe27, 0x6, 0x4, 0x9, 0x4, 0x3, 0x4422, 0x0, 0x6, 0x10a, 0x72, 0xb3, 0x0, 0x5, 0x34b, 0x8, 0xffff, 0x7fff, 0x7b10, 0x143, 0x401, 0xfd, 0x7, 0x3ff, 0x2, 0x6, 0xec46, 0xb6, 0x0, 0x400, 0x401, 0x8, 0xffffffff, 0xe11e, 0x1ff, 0x0, 0xfffffff8, 0x0, 0x8001, 0x2, 0x9, 0x1000, 0x0, 0xffff6e79, 0x5a8d, 0x2, 0x8, 0x80d, 0x6, 0x81ca, 0x100, 0x4, 0xfffffff9, 0x2, 0x100, 0x1da1, 0x6, 0x9, 0x4, 0x3ff, 0xcd, 0x61e, 0x6f1a, 0x5c9512e4, 0x3ff, 0x2, 0x101, 0x7, 0x0, 0xffff7fff, 0x3, 0x4, 0x9, 0x20000, 0x1ff, 0x8, 0x2, 0x4, 0x80000001, 0x9, 0x8, 0x1ff, 0x81, 0x5, 0x8, 0x800, 0x9, 0x6, 0x198, 0x800, 0x6, 0x15e, 0x9b, 0x4, 0x5, 0xff, 0x5, 0xff, 0xfff, 0x8, 0x1, 0x8, 0x7ab8, 0xf2c, 0x7fff, 0x7fffffff, 0x9, 0x3, 0x100, 0xffffffe3, 0x9, 0x101, 0x545d1ff8, 0x508, 0x8e, 0xffffffff, 0x4, 0x7fff, 0x100, 0x4, 0x1, 0xde, 0x0, 0x1, 0x8001, 0xff, 0x5c4f, 0x80, 0x7, 0x2, 0xfffffc66, 0x9, 0xffffffff, 0x8, 0x8, 0x9, 0x6, 0x5, 0xfff, 0x7fffffff, 0x7, 0x2, 0x20, 0x6, 0x202, 0x3ff, 0xffffffff, 0x1, 0xceb, 0x83, 0x7, 0x0, 0x200, 0x8, 0x8216, 0x1f, 0x1, 0x2, 0x6, 0x1, 0xe904, 0x1f, 0xfff, 0x6c9, 0x1, 0x0, 0x401, 0x0, 0x3, 0x9, 0xfffffffd, 0x357, 0x5, 0x1, 0x9a95, 0x7, 0xc00000, 0x5, 0x0, 0x6, 0x8, 0x80, 0x139, 0x0, 0xff, 0x80, 0x7fffffff, 0x8, 0x3f, 0xdbb5f72, 0x10001, 0x8001, 0x5, 0x1ff, 0xe06, 0x5, 0x7, 0x1f, 0x2, 0x3, 0x6, 0x6, 0x258, 0x0, 0x3, 0x1, 0x7fffffff, 0x9800, 0x4d6d, 0x2, 0x0, 0x1, 0x3fd1, 0x8, 0x7, 0x3, 0x4, 0x0, 0xfffff02d, 0x632ea0f3, 0x3, 0x1b, 0xc605, 0x3, 0x200, 0x9, 0x20, 0x0, 0x7f, 0x80000000, 0x5, 0x7ff, 0x7fffffff, 0x8, 0x5, 0x9, 0x8, 0x1, 0xfffffffd, 0x3, 0x8, 0x0, 0x2, 0x81, 0x6, 0x1, 0x37, 0x7f, 0x8, 0x6, 0xffff, 0x4dd0, 0x10a, 0xff, 0x2, 0x20, 0x4, 0x40, 0x4, 0x5, 0x5f79f543, 0x1, 0x1, 0xcf55, 0x0, 0xa06d, 0x7fff, 0x1, 0xffff, 0x15e7, 0x7, 0x1, 0x2, 0xfff, 0x6, 0x5, 0x400, 0x1, 0x101, 0x3828, 0x7f, 0x7edb, 0x1000, 0xff, 0xffffffff, 0x9, 0x8, 0xff4b, 0x2, 0x4, 0xd0, 0x9, 0xe9, 0x9, 0xe63, 0x2, 0x24252197, 0x80, 0x10001, 0xe2, 0x80000000, 0x4, 0x1ff, 0x7ff, 0x12598dcc, 0x9, 0x8, 0xffffffe1, 0x0, 0x0, 0x5, 0x7, 0x4, 0x27519a0e, 0x7f, 0x3, 0x5d8f, 0x2, 0x0, 0x5, 0x0, 0x3fc00, 0x7, 0x0, 0x1, 0x272, 0x2, 0x5, 0x9, 0xffff, 0x7, 0x8, 0x0, 0xffffffff, 0xfffffffe, 0x5c5, 0x2, 0x685c, 0x4, 0x200, 0x1, 0x7f, 0x6, 0x401, 0x6, 0xfffffffc, 0x5, 0x1ff, 0xfffffcb2, 0x2, 0x7fffffff, 0x30, 0x8000, 0x2015, 0x9, 0x2361, 0x7, 0x6, 0x9c6, 0x1000, 0x8000, 0xfffffffe, 0x7, 0x5, 0x6, 0x0, 0x800000, 0x3800, 0x3, 0x8, 0xa1, 0x40000000, 0x7f, 0x63c2, 0x7ff, 0x0, 0xf326, 0x7f, 0x7, 0x2, 0x1ff, 0x7, 0x6, 0xd0, 0x7f, 0x10000, 0x7fffffff, 0x3, 0x10001, 0x7, 0xbad0, 0xd7271ec, 0x73, 0x10001, 0x7fffffff, 0x414, 0x79, 0x1, 0x7, 0x8d0a, 0xfff, 0x45, 0x2bf, 0x0, 0x8000, 0x3a, 0x1ff, 0x4, 0x3, 0x5, 0xff, 0x2, 0x2, 0x7fff, 0x6, 0x2, 0x10000, 0x7, 0x400, 0x6, 0x4, 0x975c, 0x1, 0xf24d, 0x9, 0x7, 0x6, 0xfffffffc, 0x7, 0x7, 0x7, 0x400, 0x5, 0x400, 0x0, 0xd1, 0x401, 0x6, 0x1, 0x1f, 0x20, 0x263, 0xffff0001, 0x4, 0x0, 0x4, 0xff, 0x4b40, 0x5, 0x0, 0x3ff, 0x6, 0x4, 0x4, 0x6, 0x80000000, 0x1, 0x2f, 0x1ff, 0x7, 0x2, 0xfff, 0xfff, 0x3f, 0x22, 0x8, 0x95e0aaf9, 0x7f, 0x0, 0x5, 0x5b47, 0x400, 0x2bb, 0x9, 0x9, 0x7, 0x537, 0x400, 0xffffffff, 0x5, 0xffffffff, 0x6634, 0x2, 0x7, 0x0, 0x9d5, 0x5, 0x5, 0x9, 0x42, 0x7f, 0x1, 0x496ba401, 0x5, 0xffffffff, 0x9a7, 0x7, 0x7ff, 0x40, 0xff, 0x9, 0xfffffffa, 0x4, 0x8000, 0x4, 0x448, 0xced1, 0x2, 0x5, 0x5235, 0x7ff, 0x5, 0xd4, 0x800, 0x2, 0x2022, 0x32, 0x3, 0x9, 0x400, 0x2, 0x40, 0xfffffc00, 0x7, 0x1ff, 0x1ff, 0x100, 0xffffffff, 0xfff, 0xea, 0xfffffffa, 0x8001, 0x6, 0x3ff, 0x88, 0x10001, 0x5, 0x7, 0x0, 0x962, 0x100, 0x80000001, 0x14, 0x2, 0x5, 0x9, 0x10000, 0x4, 0xc7, 0x782, 0x7, 0x0, 0x6, 0xf5e7, 0x0, 0x3, 0x6, 0xfffff800, 0x9, 0x8, 0x8, 0x4, 0x6, 0x0, 0x32b0, 0xb1f, 0x8, 0x1f, 0x800, 0xe50, 0x8c1, 0x6, 0xbb3, 0x100, 0x4, 0x7, 0x1, 0x4, 0x5d, 0x6, 0x9, 0x13, 0x1000, 0x20, 0x3ff, 0x7, 0x8000, 0xfffffffa, 0xfff, 0xce3, 0xfffff264, 0x20, 0x400, 0x2, 0x2, 0x4, 0x97fe, 0x6, 0x3, 0x7b, 0x74f898e0, 0x0, 0x1, 0x5, 0x3f, 0x4, 0x10000, 0x0, 0xffff, 0x5, 0x0, 0x6, 0x1, 0x7, 0xbc3, 0x5, 0x100, 0x4, 0x1e84e464, 0x49, 0x21, 0x4, 0x8d7, 0x1, 0x8, 0x6aee, 0x9, 0x8, 0x4, 0x6, 0x7630, 0x8001, 0xa0, 0x10000, 0x0, 0x2, 0x1, 0xaf6, 0x2, 0x6, 0x75, 0x9, 0x5, 0x2, 0x9, 0x101, 0x8001, 0x5, 0x3, 0xfffffbff, 0x4, 0x800, 0x5, 0x8, 0xfffffffe, 0x20000000, 0xffff, 0x200, 0x7, 0x3f, 0x7c, 0xff000000, 0x243, 0x3, 0x3, 0x8, 0x8, 0x80000000, 0xffff, 0x4, 0x8, 0x10000, 0x1, 0x81, 0x400, 0x5, 0xffff, 0x1, 0x20, 0x8, 0xa00000, 0x4, 0xffff8000, 0x3d, 0x80, 0x0, 0x10000, 0xbc08, 0x9, 0x7, 0xffffffff, 0x1, 0x4, 0x2, 0x2, 0x3, 0x3f, 0x4, 0x80000000, 0x27, 0x2ef, 0x2f23, 0xc9, 0x800, 0x9, 0x10000, 0x3, 0xffffff97, 0x8, 0x5, 0x6, 0x20, 0x5, 0x10001, 0x2935, 0x1, 0x0, 0x7, 0x0, 0x80000000, 0x10001, 0x6, 0x2, 0x6, 0x6, 0x6, 0xfffffff8, 0x7f, 0xfffffff7, 0x3, 0x8, 0x4, 0xe35, 0x9, 0x0, 0x7, 0xfff, 0x78, 0x1ff, 0x20e, 0x401, 0x101, 0x5af7, 0x11, 0x80000000, 0x8001, 0x80000000, 0x9, 0x0, 0x7fff, 0x0, 0x3, 0x5, 0x3ff, 0x2, 0x8, 0xffffff7f, 0x0, 0x1, 0xfffffffa, 0x8, 0x6, 0x3, 0x7ff, 0x5, 0xffffffff, 0xfd7f89a, 0x7, 0xe237, 0x80, 0x7, 0x200, 0x3400000, 0x3a1, 0x5, 0x7, 0x200, 0xfffffeff, 0x5, 0x4, 0x636a9554, 0x0, 0x3a98, 0x6, 0x401, 0x7fffffff, 0xffffff90, 0xff, 0x288, 0x1f, 0xc, 0xffff0383, 0xff, 0x0, 0x5, 0x8, 0x40, 0xf11a, 0x63a, 0x4, 0x7, 0x1000, 0xfffffff7, 0x8000, 0x9, 0x1000, 0x65, 0xb1b, 0x10000, 0x20, 0x3, 0x9, 0xffffffc1, 0x40, 0x7, 0x4, 0xa279, 0xfff, 0x5, 0x6, 0x37e, 0x4, 0x6, 0x9, 0x1, 0x2, 0x2a9, 0xdc, 0x7, 0x8000, 0x2, 0x5, 0x5, 0x1, 0x1, 0x8, 0x1ff, 0x2, 0x5, 0x13, 0x7ff, 0x401, 0xf46, 0xcb, 0x0, 0x1462, 0x3, 0x81, 0x5, 0x32000000, 0x8, 0x1, 0x20, 0x7, 0x2, 0x5, 0x8, 0x1, 0x1, 0x32546f7f, 0x5a15cb6b, 0x80000000, 0xdcd2, 0x6, 0x8a, 0x400, 0xe4, 0x793d, 0x5, 0x5, 0x2, 0x101, 0x0, 0x2, 0x0, 0x8, 0x3f, 0x2, 0x3f, 0x4, 0x4be, 0x999, 0x6, 0x10000, 0x401, 0x1, 0x81, 0x7, 0x7fffffff, 0xffff, 0xe7, 0xdb, 0x5911000, 0x100, 0x200, 0x5, 0x6601194f, 0x8, 0xb44b, 0x0, 0x6, 0x9, 0x2, 0x1, 0x8, 0x3, 0x3, 0x3, 0x7c22, 0x400, 0x9, 0x5, 0x1000000, 0x40, 0x20, 0x8, 0xffff7fff, 0x70, 0x7fff, 0x5f, 0x3, 0x101, 0x72c9f52c, 0x101, 0x0, 0x9, 0x7, 0xff, 0x5, 0x6, 0x1, 0xffffffe0, 0x6, 0xff, 0x7, 0xd5ff, 0x3, 0x0, 0x8, 0x7f, 0x5, 0x4, 0x6, 0x0, 0x3, 0x8e7, 0x8, 0x6, 0x4, 0x6, 0xbd68, 0x3041, 0x10001, 0xc4c, 0x4, 0x1, 0x8, 0x2, 0x6, 0xfffffff9, 0x0, 0x5, 0x80000000, 0x7b, 0x40, 0x8001, 0x3, 0x9, 0x7, 0x2, 0x6, 0xa7, 0xffffffff, 0x5, 0x4, 0xffffff55, 0xffffffbf, 0x3, 0x5d91534f, 0xffffffa4, 0x0, 0x57, 0x0, 0xfffff5a7, 0x1, 0x36fc, 0x8, 0x9f1, 0x8000, 0xfffffffe, 0x7ff, 0x0, 0x5, 0x10001, 0x3, 0x4, 0x3f, 0xb7, 0x3, 0x80, 0x9, 0x5, 0x4, 0xff, 0x5, 0x0, 0x2, 0x0, 0x8, 0x3, 0x2, 0x5, 0xffffffff, 0x0, 0x9, 0x6, 0x979, 0x200, 0x7, 0x19e3, 0x9, 0x7, 0x8, 0x3, 0x3, 0x0, 0xac, 0x7ff, 0x8001, 0x81, 0x3f, 0x3, 0x3, 0x80000001, 0x0, 0x0, 0x2, 0xfffffbff, 0xcc0, 0x800, 0x7f, 0x3ff, 0x3, 0x85, 0x5698, 0x80, 0x0, 0x80, 0x1000, 0x8000, 0x34fd, 0x1, 0x10001, 0x7, 0x20, 0x0, 0x20, 0x7f, 0x3, 0x6, 0x7, 0x2, 0x8001, 0x7ff, 0x5, 0x6, 0x5, 0x1, 0x5, 0x9, 0xffffff7a, 0x0, 0x0, 0x2, 0x20, 0x4, 0x6, 0x7fffffff, 0x94e6, 0x7, 0x10000, 0x7f, 0x4, 0x2, 0x401, 0x4, 0x7, 0xfffffff9, 0x0, 0xee3a, 0x5, 0x9, 0x10001, 0x8, 0xa4, 0x0, 0x4, 0x7, 0x2, 0x43b4, 0x4, 0x7fffffff, 0xc40, 0x1ff, 0x3, 0x7, 0x1f, 0x3, 0x3c3b, 0x2, 0x8, 0x3ff, 0x2, 0x400, 0x2, 0xbe80, 0x3e4, 0x81, 0x8000, 0x5, 0xa7f, 0xff, 0x2, 0x8000, 0x9, 0x1200, 0x4, 0x2, 0x1, 0x2, 0x401, 0x0, 0x9, 0x6, 0x546, 0x6, 0x3, 0xcb80, 0x4, 0x1000, 0x9, 0x9, 0xa00, 0x3, 0x10000, 0x8000, 0x4, 0x3ff, 0x3, 0x9, 0x7, 0x10000, 0x10000, 0x9, 0x0, 0x5, 0x1, 0x7, 0x7, 0x0, 0x7fff, 0x4, 0x2, 0x1, 0x4, 0x40, 0x200, 0x42a3, 0x9, 0x0, 0x7, 0x0, 0x9, 0x1f, 0xffff09a4, 0xfff, 0x1b, 0x401, 0x9, 0x2, 0x598, 0x1e44, 0x5, 0x10000, 0x7, 0x84f0, 0x0, 0x7d, 0x3f, 0x4, 0xaf83, 0x3, 0x9cee, 0x2, 0x1000, 0x5, 0x10001, 0x7, 0x6, 0x7fffffff, 0x1, 0x5, 0x5, 0x1, 0x3, 0x5, 0x80, 0x81, 0x80000000, 0x5, 0xa96, 0x35, 0x3, 0x20, 0x7, 0x8001, 0x5, 0x5, 0x4, 0xe36c, 0x2, 0x3, 0x9, 0x3, 0x3, 0x9, 0x8, 0xfff, 0x0, 0x6b0e, 0x200, 0x7fff, 0x9, 0x11b, 0x7ff, 0x2, 0x1f, 0x2f23, 0x6, 0x0, 0x6, 0x609, 0x80000000, 0xfffffffd, 0xffff, 0x2, 0x0, 0x4, 0xabd0, 0x0, 0x7ff, 0x400, 0x3, 0x8, 0x9, 0x2bee, 0x7ce2, 0x9, 0x7, 0xb56, 0x0, 0xffffff7f, 0x5, 0x3ff, 0x40, 0x3f, 0x54e, 0xfffffff9, 0x8, 0x7, 0x8909, 0x20, 0x7fff, 0x7fffffff, 0x6, 0x91, 0x8, 0x5, 0x0, 0x80000000, 0x2, 0xc0, 0x8, 0x7, 0x6, 0x7, 0x3, 0x7, 0x1, 0x7, 0x80, 0x7, 0x7, 0x0, 0x4, 0x5, 0x0, 0x85, 0xfffffffc, 0x101, 0x8, 0x7fffffff, 0x2, 0x97a, 0x1c, 0x0, 0x4, 0x4, 0x7fffffff, 0x5e2985a4, 0x72e, 0x8, 0x1, 0x8, 0x80000001, 0x7, 0x3, 0x7, 0xc05, 0x4, 0x3, 0x8001, 0x8, 0x80000000, 0x6, 0xffff, 0x80000001, 0x101, 0x4, 0x1, 0x8, 0x8, 0x4, 0x238, 0xfffffffe, 0x3f, 0x0, 0x85a1, 0x6, 0x0, 0xffffffff, 0x2, 0x0, 0x6, 0x22ac, 0xaf, 0x5, 0x3f, 0x20, 0x643b368c, 0x1, 0x0, 0x1ff, 0x10001, 0x6, 0x1, 0x365, 0x0, 0x8000, 0x5, 0x1, 0x10000, 0x7fff, 0x6, 0xb, 0x2, 0x4, 0x7f, 0x9, 0x100, 0x2, 0x7f09, 0x14, 0x6, 0x2, 0x5, 0x2, 0x0, 0x8, 0xf152, 0x5, 0x7, 0x2, 0x401, 0x23f, 0xfffffffa, 0x3ff, 0x8, 0x1ed6fb6d, 0x0, 0x3ff, 0x1, 0x7f, 0x7b, 0x9, 0x8, 0x5, 0x8000, 0x7fffffff, 0x401, 0x7ff, 0x13ed8461, 0xfffffffe, 0x1, 0x1, 0xffff, 0x5, 0x9a, 0x61, 0x7, 0xa5da, 0x2, 0x8, 0x7e6, 0x5a33, 0x0, 0x80, 0x8001, 0x4, 0x3, 0xff, 0x7958, 0x79, 0x3, 0x4, 0x94, 0xfffffff9, 0x1, 0x4, 0x6074, 0x2, 0x40, 0x2, 0x8, 0x4, 0x74722000, 0x2, 0x408e0d7f, 0x100, 0x5, 0x6, 0x3ff, 0x80000001, 0x1, 0x5, 0x1, 0x7, 0x2, 0x4, 0x480, 0xf15, 0x8000, 0x4, 0x3, 0x40, 0x400, 0x800, 0x8, 0x10000, 0x1f, 0x8, 0x7, 0x0, 0x2], "5ef91a5b24bf15dd8e9ca2ae15f9db7c369707e9b6e14f662ce35de3976e8d1571806aee983d637428e74b841d89cc7d1e6724bbdf6e4392e65a8852497f81c1e7fd68a7d88b386d22e79a3b58e6a6065c6c5963f8b194b5c43bdab01d155cb42917dcd7e2549be0ba8b909de60b6b125a"}}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0x3, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x3}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x0) r5 = socket(0x22, 0x2, 0x2) bind$isdn_base(r5, &(0x7f0000001140), 0x6) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000000)={0x5064}, 0x4) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) 03:33:46 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xe00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:46 executing program 3: openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x22, 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140), 0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, r1, 0xb00, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x100}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x200, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x5, @rand_addr="be67f8da8cf764a1e1c3be547c3f3abd", 0x657c}, 0x1c) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f00000001c0)='vmnet0\x00') 03:33:46 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) open(0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380), 0x6) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_dev$amidi(0x0, 0xfffffffffffffe01, 0x68902) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000140)=r2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80000, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) syz_open_pts(r3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', 0x0, 0xc}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x4f, &(0x7f00000035c0)=[{0x0, 0x7d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000001}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0xe1, 0xe0, 0x0, 0x0, 0x50c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 753.333924] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000100)={0x8, 0x101}) sendmmsg$sock(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@txtime={{0x18, 0x1, 0x25}}], 0x18}}], 0x2, 0x0) 03:33:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='oom_score\x00') preadv(r2, &(0x7f00000017c0), 0x199, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x80000000, 0x8001, 0x2, 0x3, 0x5, 0x5}) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x800000, 0x10, r0, 0x0) 03:33:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x401, 0x20200) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xc5) 03:33:47 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x8, 0x9, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002f000000240000000000000018180000", @ANYRES32=r0, @ANYBLOB="00000005000000009409f8fff1ffffff0640c841060000f93e20940df0c0c85c15294b4dff6fa2bcffffff855400007300003addc717b4009500000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 03:33:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f00000006c0)="d958ebdef3568233841b08ba05b894477e8d5d5835d4033cc63058c17f36cfa80a44130accae0865d2c45141b2e23aa986a4c695907369db9ea35eddddd9eb5cb7b3dacb07e45cc5403e5cf371c7fb30a8b3099ceab3279a5d4507d7d77b382c3eb232c341cfc9132a2ced9523ccf4c3dc79d2865867d84bfab247a40a7149b5f8b3dca6363255bc26dd5e570abd7e2dbfa7cf6f87ed7517a7862056a400cebc0d1e8387aae287cefbf2e15389b4a5625791b48f87bca9c0dee9c98866910cb5663d3b391796ea33da7b8978915d12bd88091db7121aaea2757af81f0422220d3a692a062964f882cfbeb7995ce64727e6d30b14b3dc50e998f5f7be819d3f894a5c4d2b9f43e685907b4eaed78beecea516bd797d52a43a365b36c882f19d5390ae8a280c306f58ddaf44186a2d1ab73b4c94e34e5516e17efcbd7d605943dd563f555b6a0596f446c7441abc4d4abc7df121e5f8e13b369d9bfbd6269332032e6b5d6629c18a87cc63643ace49b42a3ce24bb2daa93de3622d2b2558795ff40d936e403b6b59f031c991c026fd91b8201e46e105deeb7f92b0bff014f4ea45e7a32af7667fd0d343feaaa6d973bd1967b21855d7605179fbbfe562c81c3d5903b122447218b1e0c4b898d61103c7fe9406622a2006de900590b909c6d69988580d4789b4a0edb64ea75b5764276dcc30df0c1f8cbcae77a8ef9b6edc0795d69d92be0fed8c96a73e22dc3416c363175174eb7b67a63822fc5bc3ad08729c0bb1e8e64b3e959bce721d01fa05f469d9b5f45dd95735202582400a37f3455663baa696828c38c8a72b142cb08b6fc93820a1d512a1d8a0db0bb0671c64a14b241568d0153c7a15bf52a655008fbadbb0918bc3933a2dfd50b82424e3709ef2bf6e50ec1760e30f0fa7b46fdd079323e599d328feb3a546f79490a66e9a1159486cfaea4dc662a42bbeefa430b80f2593f9f13f15aa8e1a2e194bd68122129ffbcc9a765a24a0737ba6e955092fbddf19d3d6387bab4a64ab930b5ca3475bb9bfb170ac985c76c2056d64e7c3c644045930277dcf7629b7953d6ffeff5833e47aebb466b701148aaa698a422423816aed68512246cb964c749108aa43c62278ca558cae021151d9139d85d3550b1b302414cea0f865ec3711496a3d051d2802a443dffb873d50b8f0e339da671d3b6d3c36c6ba4a5edc21619c22d2ad4ecaf914956dcd7455875e3056595f3ea85270f03ad3e24e67e0b54c1a896fd8f12d0e6b5e1cb3d0c4aa85dbfffc3c8e118b562e0b03343b6d77c58d0c6531d0364b707a25ee2f93044a998dbfd9ab63bce4cdd63a8edfe22e019941c7b9c6cac4ea1353fe565769d63415e6917d85a5cbd73cdcde174d50046284d6a9d10ead838fb1ecac421674e6043b967425cc83a0d913d9def852b27748f655b52d54fcb8b189ecfc5a1fe44e46fdfb94e716d773154c4c2d03093d17538d86694fed0b4160db6e9f8b95945e7c77112c29debc478e210dd0b7b7cf08f0e1dea3578f9a2ba4a488325c58549953a286b8a4c2a12d8bf533834ffe8743ebc861df7ea8b66fb3120acff4d5a7d6f48460837957e971b2e14a8981e8341a8daa5a8b1a0767b1445e22d9211e20e302af27691c8474cd5b06c35fbcf50b06e4cf071c0a3330d467ee10d4a285c073361ff0a23816bc3f0084911bfa01d06ba426a53e26f60f040809e33f0aa41c5d44c0ece71dba55859f9ba4dec2ea9296d485ce0ab660f643be96ab2cca2fad3413722c8a18af1640a6754bc0d540ca192dfcd0261b946694f92280d4c84518141b74b4445a5d0c0bde4483dd3c70c972697516466a6939e9131119e7a35e2ede8bce336fbe581dc9207aaf44d80641dfc2270b1d89cc2617004dd37d7d501445cbf54f428b1b56df2ffed4afaf2bce7e51e9dff6b6a31ad51206e0e7ea07009cce9531eb22a3cb38d9a07a5cf23ba13e236815682ebc1d0ce97c37d73783fa85f3a048df5f6f1283e16972f17919840d1a14f892a622a29cd00049a25b43325bbed5b241f671516c42a425d78fece49c9597bb1275e6648639141afee96e5658c9d57dff9d659e6275f944b622580bfd1390db7556f6ab82930afac09292ae3c1bb085ca4744728199eca2ae61069c25f9a17e91bbe8e661b1209a39ef684415b3babbaad27e504b62cf5d0eb4aa741aae5d3b6d0b2422f71f3143d934a547fe88500693cb0f341026efef3034f46290626177057d6bdcac7b0c26f15a4cec461b599c30e90c6cff2bda2bcbd030c75c3b20ab7c9787d407691bfb2ece947a157b4c7dc60d8e1730215e33e4f1271e542954fe81d92ee52b14484005f287991eb634953f46ea03ac2ef64def8f068ceb67d244a06ffa9ab727699bcf49ceb2d7afa1cc9c5548502d91038399a1e2871d241fb531e9ace1057e4d741aad37c3d821f51b346a5e571768839d9be71e88e303246197060516e3c097d265d4433c0eac3bf9f8f9cac30788566ab6b69e98930c23cc8ffd7819da70aac044342179d244e943b7a77728e6e5423c953ac0d4e93b58f9e1a0e1835854450f67b2d008b8db9a45592760aac292c31005c4c73b1c83565bbcf4c253f3a6d11cba5fe12875028eeb90b593ac8321c6cdfc3225651942eb80b7c54fa06522abaef411e845e3d0f06505daa493b24cecf9379f9806e48a9293e83046782a413a45d7421f05aa225dc4bddaf6f705a5c48c180c33665c46c2511e0b6c0204f90174ca3fa34c57e1b715cfbbc5dacab5fb194bfb174d04c18e978240701d623372eb6ea0a27f55b3550bd8d5b4e5baa6f9a966554e75e641365d49f0886b41949f5bd51fe2a47c844c04c1061988f74d33884b7f59505722a5cea01a9c679407d2f9c5f9e8fa5768bf64c2014fe45b7f9682503018be0e6900fbb89e0cfd61fbff41260391199ebeb85796463f43f85198fb32c0becd1b48b60f9c4fd3e23dcc8c84a397720457cc0920a2016643eddf48807dc0fc0721168020a7799bf55ea3bcffbc65773a19d4fd955236159a02357fba629f8503f3410c5e702afd9cb2e48fc62ddde6978f3490255ef864579e1a306b79cca4af680b9a634129b6a27212ccb5e764f87981b5e2f33b2a786c2dde25cd44fa07ff88788d34ad578fcc43e6b12ae8e0762cc8503e55a41158a03fc16756dc95bff6a8aab2d7e406bae0f902e6ff9beeef6c2c1bd775a334f4349938e18feadcacce0b4fc8ec73bba1d0af61e902d11a3231fff8ef4223e96bc9f8978b6c9ba880061e761ef04e6fe25463a8f3b02f87f4f1df0484346517f62366e5999b29448c751cc21f505e9b5d23049024fed075fccd7a5742ae096713da6b9437433a413005107b98981e1a1a40b498a08db59f39ce4b0a5a38c71ea182dba1e0513a7c39607671cddf3633b96eef4845e76d33a73dde8d866586d1d4bf2f76f5948af519021ae68f4d19214b58fd7036eacb5bf41ab2f7f72b18d5d539c438dfc9e80cca12bc6d359ab88acbde8ed98d1ade2d3fead078de920e51ea421930dfe8c981e75ab65be32685eb8982e27a073f99fb9b6919066e6fb1dafec086be8ffe0bce544bb2ee6df5811036f82d9badabce8d2803afc36498a838956c86aa7a35fee96736f28e9072839307cefd6a82f90c3d27d6ba7482f6c603549dfa5c525a067efdda331661ce25ee8237b706406eba0ce809f969c6e0577823547037196f7e2ac553f02025e3c9a5cea7e23e8dfd3c233c876ecfe05b9a6dfe76bf4a1bf0becd5e48374b0612d6d41c037ddbe20755cc96d71e2ec964267677b1bf874477a72c01c386959d22b559b3128cbcfa982cfdf970ce2306324e8064393746f1b4aac763163133179ea4b3cb34dd81389b2e5f47e3e6b90388d0cd24ce140d94efb96430322bdcd64fbd0bee9c26a8f60dc5af18768f4780421eea42289c12e6810b3eab0475b469b098687d71d2537476620448d60195e1a820f97c63d75368f1a5d58db17c3cf711ef3805d95337d463157415308630e43583db34478f65c15f8fcc34d0806c4b66fc81e44ea0e05ced48f5eb29f50a8c05021a221b7098952b4b66daf458c255399cf849d3b6593aea8ab05bc54ce06348cd356fc73f6daa29a5bd2a5afe8cc02eca7dc2611fb3fb4a77b2bf3e4dbc806c2accf883e816760c4ce141b29a3d7e28ff83997b42e38615eda4fa7b1ac844a789c8341fa6c3ff35da5c0309ec67bc254c69c119d2d7d4a654e496ae218b6bdfbd4636a6d5bed2731867bfbd54b4993abc893b141759f4012360a10fc0b2415c2091cb1d121b3d8102dfb1335c1e949a636a424099d3fdb1ddff585dfb6ce082866ea142aab21c5c832c160444372f9933ecd80a3d646d471fe5c05d295acf0663d97a1e0933209de4fccecc8b6a576a200d5e16c196a45a5a2b354dd6eedbfd40fb416a0c30de68bc9d419d1863000d16381250b71d4464b8736a89b8bd5afe723165d07d308e38d3f1e64d54dc52e6dcd4036d31c267b666cd93e4ce808287321f1bbdbe720d02c9748cf254ae8aa65aac04b0892985301835ea3b1c601ed5a023d809b35b53043fb3f8eb9c3fac0d4d586f175d34c03c5816e471d9ccc257934be08064edc89274b32dcdfa279d41b3da49b381b8c52840ae3fddec1e18c0b0333bfb9b5bd19c2e242328a45dd5f7b6d4a457d90db4697efc5080566350e21bc8a47a878a88a87940168990120b843651a27fc3e34e4abbca0ffdbe47bf006758baec18d15426ab5017ec3900a98c125276a0c70040e64dfc735d130cad76556335fb29a718af99052fab02409f7465be6c14bd80a6416c04734233f90b2006929ceaa31f0fea3a4624e7c6afcf4a36770bb8075294a4ace9216d7e3911d5c2101b92d2f321f7839a9e14501ae67f08166ebb9d1a5f56f7b49e82fde0b48dc07cc875491e54d097f22a43fd729abaceeaf68e62ed45deb59a7844cbff877943bc1faf84075d66f98271e2fd99fb8dd455adff345f383f4433f17a8a7a94c70eab5d32caf7c512098161d91b6b47184349af7ddf2270be4028a03df1e8045ebfebf34a1ad8428fc681053ce713899d4cdce176525b30dc8d0fee3715fbf1c9cb6cf7783d965666b27b8764b157817b8aa36cd1460cd277874c5fd79e7b5dca1edd6f89bc048143c5ff2fd07ca7a610e198a3cfce2659f5aff1632b17e2c225e2070016c6dadd2a6d8309b77963933f0dde9dd94e11662fcffaa34e4196b63323b09614ec28f078a07bb5add8d5a332e32026dd29764d7c22b8e875022c18277a4a817beb7c821cf33952b6e6fdeecac6d3cc7f938d830d44017ce20058700dec34ba74bff12519cf9be7cd211de6634e462a5071ecbec4348d66406380202eadef136c72416201b4d12646291520ef74135be65b5028dd47f4bc7d3a3941e83c1b5263d83327af7138133c7d9df652b62f02517fdb159ba5aaf3de09aa6a1ce92c5d45641aeda58fbbdde95fb33da5a31520783103be9715f1587483ca1832afc59f082d17a9019baa7504357372149ec3344996706d0040157f8634cd8ac1d885122a5956cfd235c57bf33d2367f9768586c3fa142498f47d80c7ff3963fb97c8cbb5aaa238117fe6e7dc4feb23c8859a515d152d0f3e7514d9c8b9854cf895181c4f854125e6825263eab5a1a07ee5e75f3efb92bdef21677b85b0f21ef55d63bd709fa277bd5369e84392cfa3a685f7edc2c75395d203f109660633f3a8746ad8fc4492e3415fd2a1b75a490029441babb087d1985a", &(0x7f00000016c0)=""/4096}, 0x20) r1 = socket(0x22, 0x2, 0x2) bind$isdn_base(r1, &(0x7f0000001140), 0x6) recvmmsg(r1, &(0x7f0000005e80)=[{{&(0x7f0000000200)=@generic, 0x80, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/106, 0x6a}, 0x9}, {{&(0x7f0000000300)=@nfc, 0x80, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000040)=""/9, 0x9}], 0x5, &(0x7f0000003740)=""/242, 0xf2}, 0x10000000}, {{&(0x7f0000003840)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f00000038c0)=""/121, 0x79}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000580)}, {&(0x7f0000004940)=""/103, 0x67}, {&(0x7f00000049c0)=""/231, 0xe7}, {&(0x7f0000004ac0)=""/187, 0xbb}], 0x8, &(0x7f0000004c00)=""/17, 0x11}, 0xc1}, {{&(0x7f0000004c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004cc0)=""/65, 0x41}, {&(0x7f0000004d40)=""/59, 0x3b}], 0x2, &(0x7f0000004dc0)=""/202, 0xca}, 0x8}, {{&(0x7f0000004ec0)=@nl=@unspec, 0x80, &(0x7f0000005400)=[{&(0x7f0000004f40)=""/80, 0x50}, {&(0x7f0000004fc0)=""/195, 0xc3}, {&(0x7f00000050c0)=""/133, 0x85}, {&(0x7f0000005180)=""/231, 0xe7}, {&(0x7f0000005280)=""/166, 0xa6}, {&(0x7f0000005340)=""/151, 0x97}], 0x6, &(0x7f0000005480)=""/157, 0x9d}}, {{&(0x7f0000005540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000055c0), 0x0, &(0x7f0000005600)}, 0x7f}, {{&(0x7f0000005640)=@tipc=@id, 0x80, &(0x7f0000005940)=[{&(0x7f00000056c0)=""/101, 0x65}, {&(0x7f0000005740)=""/112, 0x70}, {&(0x7f00000057c0)=""/170, 0xaa}, {&(0x7f0000005880)=""/40, 0x28}, {&(0x7f00000058c0)=""/81, 0x51}], 0x5, &(0x7f00000059c0)=""/123, 0x7b}, 0x6}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000005a40)=""/218, 0xda}, {&(0x7f0000005b40)=""/75, 0x4b}, {&(0x7f0000005bc0)=""/246, 0xf6}, {&(0x7f0000005cc0)=""/86, 0x56}], 0x4, &(0x7f0000005d80)=""/253, 0xfd}}], 0x8, 0x80000000, &(0x7f0000006080)={0x77359400}) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x402900, 0x100) getdents(r2, &(0x7f00000005c0)=""/223, 0xfc61) 03:33:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3800]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 754.001355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 754.034333] QAT: Invalid ioctl [ 754.073353] QAT: Invalid ioctl 03:33:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3f00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x268, 0x0, 0x5, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7}, [{{0x254, 0x1, {{}, 0x0, 0x1, 0xd08, 0x40, 0x0, 'syz0\x00', "ba355e6b32fa7bf00600203d22912e1524f8665d7fea7008797ac1c2c17c593a", "f43de1bdb07317f190a351e8886127831ae2d5f1a586d0cf634ac83b2c05b5b3", [{0x0, 0x9}, {0x800, 0x33}, {0x0, 0x0, {0x0, 0x40}}, {0x0, 0x1, {0x1, 0x8}}, {0x0, 0x200}, {0x4}, {0x6, 0x0, {0x0, 0x400}}, {0x1, 0x39a6}, {}, {0x0, 0x0, {0x0, 0xe3a}}, {0x5, 0x0, {0x0, 0x3}}, {0x0, 0x3}, {}, {0xff}, {}, {}, {0x0, 0x7}, {0x5, 0x0, {0x0, 0xb1}}, {0x0, 0x67ad}, {}, {0x0, 0x7}, {0x0, 0x0, {0x1}}, {0x1ff, 0x0, {0x2}}, {}, {0x0, 0x0, {0x0, 0x7f}}, {0x0, 0x0, {0x0, 0x8}}, {0x1}, {}, {0x0, 0x0, {0x0, 0x2}}, {0x0, 0x6, {0x2, 0x7fffffff}}, {0x200, 0x200}, {}, {}, {0x1}, {}, {0x0, 0xc3f3}, {0x9e, 0x0, {0x0, 0xcc82}}, {}, {0x0, 0x0, {0x3, 0x8}}]}}}]}, 0x268}}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0xffffff1f) 03:33:47 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5865]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 754.241125] audit: type=1400 audit(2000000027.600:121): avc: denied { map } for pid=20788 comm="syz-executor.4" path="socket:[182242]" dev="sockfs" ino=182242 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 03:33:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = inotify_init1(0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@empty, @loopback, 0x0}, &(0x7f0000000100)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x1, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x6, 0x3}, 0x0, 0x0, &(0x7f0000000500)={0x5, 0x10, 0x7, 0x468}, &(0x7f0000000540)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=0x7}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='limits\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x2, &(0x7f0000000040)=@raw=[@generic={0x20, 0x5, 0x4, 0x20, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x400, 0x9c, &(0x7f0000000340)=""/156, 0x40f00, 0xd, [], r3, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x5, 0x2, 0x9}, 0x10, r4, r5}, 0x78) close(r2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000180)) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x1f) ioctl$TIOCSERGETLSR(r7, 0x5459, &(0x7f0000000740)) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x2, 0x0, 0x6, 0x13, 0x1fd, &(0x7f0000000c00)="86447e42129ffb6ae019fc88e27dfd2709bdeb692389a9ed14cad77bc93618cc0f9a51355d21f629b8773334855b54f03c7c8f0f123a9362b505a1d6e44bab97ecc7d837379a1a1d8b237457cdcbab2af0db6646d88c34d1148691ea56d266408af345768f517109489d23f9bb74623689c6f2b29863496e682ebefc1cc7f75ddae7f175fae6799524ff2662c18ac6b413d276598b7d879209dcf05c8dd25ae43ae612bda3332f95bd27257681b34cc59172ebe25b4b20f2c5df86c28b915ecaf67a2ed8b724de896594fccbf0e1e21afeaf258a759d4d6a6a3221e10197b1073b6a803670bc1a1b9fc41b21d414b6532e2359e137f76daa8d2c0e9789d049c423effeb78bf24234b727fefae18c5dc7b2e2c7e71a533ad42b9366823f1adfee5a6cd1cf1b81aee0aa509aa511cc8b90cfc24ff134beecb19297840c52c322783c77aa4d06db341f366b90ee5b8ecfa3aac8818983daf7ad7392cd5124e4962480c0eee04f7f320b232f0d26185c7f9be5b193a699b53ee70d6ef291a5db146de61a002bfdd50a2991cd67307774f70acded9e53f500c86b3bb5b6e650d4eec0557a90ae9abf1229303c82ecba2808b88213a9f493356ec780acae5ac1a9b47765e6c38eda00f9a9e4b2ccc9797876b36bec6010a7160f5c88021ceccae6673058a2726b7885a47ea90f4c51cd0d89745e598c72fd7ebbe9c1c2dc2566d5a094a03942c208dc1ab911c16770dab7017dee5e19c9d25cefb19e8a7a7653e797d8fb35c584d8a50e93581e37fe8b9a8a58b81eed15e9a7bac9682afe22d1695b7452e5d59faff50f36d28280b83c7db7e11a50965708064fdae910421efd736355e7290b94287f44d8c66f1ab0ce210c9fe16c291269f96c46d5fbabd65c31288f3636e6f1c890def65e41a378edfacb50ea762a12669138c02f33a34b7c230ce4d2a624d6ed101e538eb00c83b2fbffde9bbbc1693ace9126afc227d8bf216993abc8893946043eb764a3a66ace23e03d3d58995bf1236f62d8a2afe99170d5519b5d625af721ac335bae65de77909a7a03cffbfee8ff17ad5a996cda2327f1c45a711630a62d147910e6385dd9b29a32068b1c9e0d28cfe0999883f3023982f8f71c36d0eeb0e554469b556a573602958720bf3a21261078c579ff38953ca2c6c238555ed103c35a8d834bd23687bd8a98abc70d971ca09d62e0190a888642dbd1190721494a3a0602e80b23aa5b3a1538af1125e76353706b2cf25acaad0f660cb23b459317d9169670a0bca2e7c1f85285281bafb541708ee34ef53b0f7208c894c330ed9ab16f2bc021ffd94cc6b7ad542fa8b0e5bd91e65c023168491f809f8a9c11e86cdab456bde83f353ebc4e443f6f23ef84ec4c2656354b46e391c6583e839631fb4d01303fd3275e897aa33e39b0575abf8ce8e81295b5b26651ef"}) [ 754.328675] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x401, 0x20200) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xc5) 03:33:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x401, 0x20200) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0xc5) 03:33:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:48 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x7f, 0x8) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="13000000000000002900000039000000fe8800"], 0x13}}], 0x2, 0x0) [ 754.657139] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6558]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:48 executing program 2: socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) r2 = socket(0x22, 0x2, 0x2) bind$isdn_base(r2, &(0x7f0000001140), 0x6) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@rand_addr="aa73b39c8f49d1513da03630f602230e", @in=@dev={0xac, 0x14, 0x14, 0x33}, 0x4e24, 0x0, 0x4e23, 0x1ff, 0x5, 0x20, 0xa0, 0x33, 0x0, r3}, {0x7, 0x0, 0x80000000, 0x0, 0xffff, 0x992, 0x6aec8005, 0x4}, {0x401, 0x1, 0x6, 0x5fe}, 0x6, 0x0, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d2, 0xf4}, 0x2, @in6=@mcast1, 0x0, 0x3, 0x0, 0xff, 0x0, 0x7fb, 0x3ff}}, 0xe8) 03:33:48 executing program 3: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000300)={0x7d0, 0x320, 0xa00, 0x640, 0x80, 0x8001, 0xf, 0x0, {0x101, 0xa28a, 0x1}, {0x1, 0x0, 0x1}, {0x7b, 0x8}, {0x5, 0x2, 0x1}, 0x2, 0x40, 0xffffffff, 0x0, 0x0, 0xffff70f0, 0xe, 0x80000001, 0x3, 0x1, 0x36befaed, 0xf0c5, 0x10, 0x200, 0x3}) dup(r3) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000240)="d2", 0x1}], 0x1) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0xfff, 0x2, 0x5}) dup2(r2, r1) [ 754.969538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.089823] protocol 88fb is buggy, dev hsr_slave_0 [ 755.095005] protocol 88fb is buggy, dev hsr_slave_1 03:33:48 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='O']}) 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8100]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:48 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)="6653070000853c07bc3376003639405cb4aed12f0000000000ae47a825d86800278dcff47d010000805ae64f47ab28cd809e6f4c6bb7a95c69b80d5b9961e699b0a4534560d2125882255f18866e98b04676f40f7ec7e18dea976ab283084eb5", 0x60}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x20, r0, 0x0, 0x0) 03:33:48 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) rmdir(&(0x7f0000000140)='./bus/file0\x00') 03:33:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:48 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045009, &(0x7f0000000000)) 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xcb04]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 755.257503] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 03:33:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 03:33:48 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65ef0b007c05e8fe55a10a0012000200142603000e12050000000000812fa800080003001000e558f030035c3b61c1d67f", 0x43}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000000140)='.', 0x0, 0x0, 0x0) 03:33:48 executing program 0: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x1) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x1) r2 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x0) 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) exit(0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:48 executing program 4: socketpair$unix(0x1, 0x1, 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000040), 0x756, 0xfffffffffffffffb) 03:33:48 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/nullb0\x00', 0x2002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r1, 0x0) ioctl(r0, 0x80044100, &(0x7f0000000040)) 03:33:48 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2, 0x6}, 0x7e485f99e515b417) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x82000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000200), 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendto$inet(r2, &(0x7f0000000180)="c7e8c50f7f88c1b0aef8b4fa", 0xc, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r2, 0x1) 03:33:48 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x34000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:49 executing program 0: socketpair(0x1, 0x0, 0x88, &(0x7f0000000240)) 03:33:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x400300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:49 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x200}}], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x0, 0x1, "f0"}, 0x9) 03:33:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:49 executing program 4: 03:33:49 executing program 4: 03:33:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="bf07000000000000000046cb046b"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xb0}]}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 03:33:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf0ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:49 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="bf07000000000000000046cb046b"], 0xa) close(r2) r3 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xb0}]}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f02", 0x8) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 03:33:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:49 executing program 3: socket$kcm(0x2, 0x2, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x69) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x30, 0x5}, 0x0) 03:33:49 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x1000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 756.620836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.655039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 03:33:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 756.677072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.706410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x2000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:50 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chown(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x4, &(0x7f0000000840)=[{0x0, 0x0, 0x2}, {0x0, 0x0, 0xef22}, {&(0x7f00000003c0)}, {0x0, 0x0, 0x7}], 0x0, &(0x7f00000008c0)={[{@nossd_spread='nossd_spread'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vlan\x00'}}, {@obj_type={'obj_type', 0x3d, '&]@wlan1'}}, {@hash='hash'}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 03:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) [ 756.722038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.746627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.763067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 [ 756.782374] xt_ct_set_helper: 5 callbacks suppressed [ 756.782381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.785091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.814456] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 756.816809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 756.840130] selinux_nlmsg_perm: 2 callbacks suppressed [ 756.840147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 [ 756.858063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.871274] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 756.890741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.910568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 03:33:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 756.930094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.965069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 [ 756.993124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 756.999970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22288 comm=syz-executor.4 [ 757.024451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 03:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x4000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 757.039353] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22319 comm=syz-executor.0 [ 757.045599] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:50 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) chown(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000240)='./file0\x00', 0x2f, 0x3, &(0x7f0000000840)=[{&(0x7f0000000280), 0x0, 0x2}, {0x0, 0x0, 0xef22}, {0x0}], 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 03:33:50 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x158, 0x0, 0x0, 0x158, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x5000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 757.128612] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000180)={{0x50f, 0xa0000001}, 0x1}) [ 757.231442] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:50 executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='auxv\x00') sendfile(r2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x400, 0x80000}, 0x0, 0x8, 0xffffffffffffffff, 0x601ca79bbf5ddeaf) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001240)={0x4, 0x70, 0x0, 0x80, 0x3f, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f00000001c0)='f2fs\x00', 0x0, 0x0) socket(0x12, 0x1a6273f2b2e289f7, 0x0) socket(0x1, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) close(0xffffffffffffffff) creat(&(0x7f0000000340)='./bus\x00', 0x135) gettid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe28) accept$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000300)='}', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r6, r5, r7}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\x00'}}) write$P9_RREAD(r4, &(0x7f0000000300)=ANY=[@ANYRES32=r5], 0x4) fallocate(r4, 0x0, 0x40000, 0x4) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xd000000, r4, 0x0, 0x8}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x304) 03:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 757.326163] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:50 executing program 4: r0 = eventfd(0x8040010000) read(r0, &(0x7f0000000140)=""/196, 0xc4) 03:33:50 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x8000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) [ 757.359237] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:50 executing program 3: r0 = eventfd(0x0) read(r0, &(0x7f0000000140)=""/196, 0xc4) 03:33:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 03:33:50 executing program 4: syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='uid=', @ANYRESHEX]) [ 757.561881] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:51 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x9000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:51 executing program 4: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0xffffffffffffffff, 0x4c00000000006800}, 0x0, 0x0) 03:33:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:51 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) [ 757.751081] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 757.767193] SELinux: failed to load policy 03:33:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x58, 0x0, 0x0, 0x0, 0x20}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xa000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) [ 757.834947] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.871574] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 757.887593] SELinux: failed to load policy [ 757.889344] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28841) ioctl$USBDEVFS_IOCTL(r0, 0x4b49, 0x0) 03:33:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xb000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:51 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:51 executing program 4: socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:33:51 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:51 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xc000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x28841) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) 03:33:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 758.599272] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c 03:33:52 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) [ 758.667390] SELinux: failed to load policy 03:33:52 executing program 3: unshare(0x60000200) 03:33:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xe000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:52 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:52 executing program 4: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000940)='auxv\x00') sendfile(r4, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r5, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0x601ca79bbf5ddeaf) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001240)={0x4, 0x70, 0x0, 0x80, 0x3f, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x8) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x2) socket(0x1, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x135) gettid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe28) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r6 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r7 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000300)='}', 0x1, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r8, r7, r9}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\x00'}}) write$P9_RREAD(r6, &(0x7f0000000300)=ANY=[@ANYRES32=r7], 0x4) fallocate(r6, 0x0, 0x40000, 0x4) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0x304) 03:33:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 758.814567] IPVS: ftp: loaded support on port[0] = 21 03:33:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x10000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:52 executing program 2: socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:52 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:52 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x4, 0x0, 0x0}) 03:33:52 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x20000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:52 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 759.145009] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 759.174848] SELinux: failed to load policy 03:33:53 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) read(r0, &(0x7f0000000280)=""/4096, 0x1000) 03:33:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff05000500", 0x2c}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0x0, 0x401, 0x0, 0x80}, &(0x7f00000000c0)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e0003", 0x23}], 0x1}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) 03:33:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x38000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:53 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:53 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 759.703274] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 759.756501] SELinux: failed to load policy 03:33:53 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:53 executing program 0: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000600)) 03:33:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x3f000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000600)) [ 759.890848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 759.970093] SELinux: failed to load policy 03:33:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$phonet(0x23, 0x2, 0x1) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f000001d000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:33:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:53 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x60000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r3}, &(0x7f00000004c0)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000000)={'crct10dif\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\x8d\x00'}}) 03:33:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:53 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:53 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x65580000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:53 executing program 3: [ 760.568789] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 760.578117] SELinux: failed to load policy 03:33:54 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:54 executing program 4: 03:33:54 executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:54 executing program 3: 03:33:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x81000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:54 executing program 4: [ 760.792705] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c 03:33:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) [ 760.836826] SELinux: failed to load policy 03:33:54 executing program 3: 03:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:54 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x88a8ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:54 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)) 03:33:54 executing program 4: 03:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x9effffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:54 executing program 4: [ 761.088293] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c 03:33:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) [ 761.152279] SELinux: failed to load policy 03:33:54 executing program 3: 03:33:54 executing program 4: 03:33:54 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xcb040000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:54 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:54 executing program 4: 03:33:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:54 executing program 3: 03:33:54 executing program 3: 03:33:54 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:54 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xf0ffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:54 executing program 4: 03:33:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:54 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:55 executing program 3: 03:33:55 executing program 4: 03:33:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xfcffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:55 executing program 4: 03:33:55 executing program 3: 03:33:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xffffa888]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 761.837763] xt_ct_set_helper: 28 callbacks suppressed [ 761.837771] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:55 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:55 executing program 4: [ 761.880040] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xfffff000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:55 executing program 3: 03:33:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:55 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00('], 0x8) 03:33:55 executing program 4: 03:33:55 executing program 3: 03:33:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:55 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 03:33:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xffffff7f]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:55 executing program 4: 03:33:55 executing program 3: [ 762.207682] xt_CT: You must specify a L4 protocol and not use inversions on it [ 762.227698] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) 03:33:55 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xffffff9e]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:55 executing program 4: [ 762.261724] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 762.320497] CPU: 1 PID: 25018 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 762.329565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.338934] Call Trace: [ 762.341562] dump_stack+0x197/0x210 [ 762.345327] warn_alloc.cold+0x7b/0x173 [ 762.349324] ? zone_watermark_ok_safe+0x260/0x260 [ 762.354194] ? lock_downgrade+0x880/0x880 [ 762.358364] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 762.363943] ? avc_has_perm+0x404/0x610 [ 762.367945] __vmalloc_node_range+0x486/0x790 [ 762.372465] ? sel_write_load+0x1de/0x470 [ 762.376630] vmalloc+0x6b/0x90 [ 762.379855] ? sel_write_load+0x1de/0x470 [ 762.384025] sel_write_load+0x1de/0x470 [ 762.388042] __vfs_write+0x114/0x810 [ 762.391782] ? sel_make_policy_nodes+0x1520/0x1520 [ 762.396730] ? kernel_read+0x120/0x120 [ 762.400641] ? __lock_is_held+0xb6/0x140 [ 762.404900] ? rcu_read_lock_sched_held+0x110/0x130 [ 762.409941] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 762.414689] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 762.420323] ? __sb_start_write+0x1a9/0x360 [ 762.424656] vfs_write+0x20c/0x560 [ 762.428206] ksys_write+0x14f/0x2d0 [ 762.434629] ? __ia32_sys_read+0xb0/0xb0 [ 762.438704] ? do_syscall_64+0x26/0x620 [ 762.442867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.448229] ? do_syscall_64+0x26/0x620 [ 762.452330] __x64_sys_write+0x73/0xb0 [ 762.456244] do_syscall_64+0xfd/0x620 [ 762.460063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 762.465253] RIP: 0033:0x45aff9 [ 762.468452] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 762.487373] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 762.495099] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 762.502371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 762.510081] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 03:33:55 executing program 4: 03:33:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x278, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}, @common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d8) 03:33:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:55 executing program 3: [ 762.517350] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 762.524621] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c 03:33:55 executing program 3: [ 762.586547] Mem-Info: [ 762.589539] active_anon:217400 inactive_anon:199 isolated_anon:0 [ 762.589539] active_file:8598 inactive_file:38931 isolated_file:0 [ 762.589539] unevictable:0 dirty:127 writeback:0 unstable:0 [ 762.589539] slab_reclaimable:19036 slab_unreclaimable:109111 [ 762.589539] mapped:60488 shmem:246 pagetables:3293 bounce:0 [ 762.589539] free:1121406 free_pcp:535 free_cma:0 [ 762.627179] xt_CT: You must specify a L4 protocol and not use inversions on it [ 762.659168] Node 0 active_anon:871632kB inactive_anon:800kB active_file:34244kB inactive_file:155736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241884kB dirty:516kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 231424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 762.688000] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 762.714292] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.740600] lowmem_reserve[]: 0 2545 2546 2546 2546 [ 762.745650] Node 0 DMA32 free:692712kB min:36168kB low:45208kB high:54248kB active_anon:869500kB inactive_anon:800kB active_file:34244kB inactive_file:155736kB unevictable:0kB writepending:516kB present:3129332kB managed:2609804kB mlocked:0kB kernel_stack:10304kB pagetables:12864kB bounce:0kB free_pcp:2728kB local_pcp:1292kB free_cma:0kB [ 762.776490] lowmem_reserve[]: 0 0 1 1 1 [ 762.780580] Node 0 Normal free:0kB min:12kB low:12kB high:12kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1140kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.806553] lowmem_reserve[]: 0 0 0 0 0 [ 762.810725] Node 1 Normal free:3780084kB min:53704kB low:67128kB high:80552kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 762.838456] lowmem_reserve[]: 0 0 0 0 0 [ 762.843501] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 762.857163] Node 0 DMA32: 1086*4kB (UE) 517*8kB (UME) 123*16kB (UME) 1338*32kB (UME) 472*64kB (UM) 228*128kB (UM) 105*256kB (U) 49*512kB (UME) 29*1024kB (UME) 24*2048kB (UME) 110*4096kB (UM) = 694032kB [ 762.875459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 762.886275] Node 1 Normal: 55*4kB (UE) 251*8kB (UME) 270*16kB (UE) 55*32kB (UE) 22*64kB (UME) 10*128kB (UE) 5*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3780084kB [ 762.903563] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.912508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.921448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 762.930394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 762.938979] 47648 total pagecache pages [ 762.943061] 0 pages in swap cache [ 762.946525] Swap cache stats: add 0, delete 0, find 0/0 [ 762.952071] Free swap = 0kB [ 762.955103] Total swap = 0kB 03:33:56 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 03:33:56 executing program 4: 03:33:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xfffffff0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:56 executing program 3: 03:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) 03:33:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 762.958467] 1965979 pages RAM [ 762.961693] 0 pages HighMem/MovableOnly [ 762.965678] 341724 pages reserved [ 762.969204] 0 pages cma reserved [ 763.018802] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:56 executing program 4: 03:33:56 executing program 3: 03:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) [ 763.059085] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 763.088453] syz-executor.0 cpuset=syz0 mems_allowed=0-1 03:33:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xfffffffc]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 763.104421] CPU: 0 PID: 25251 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 763.112275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.121765] Call Trace: [ 763.124379] dump_stack+0x197/0x210 [ 763.128039] warn_alloc.cold+0x7b/0x173 [ 763.132041] ? zone_watermark_ok_safe+0x260/0x260 [ 763.138079] ? lock_downgrade+0x880/0x880 [ 763.142268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.147839] ? avc_has_perm+0x404/0x610 [ 763.151846] __vmalloc_node_range+0x486/0x790 03:33:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0xffffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:56 executing program 4: [ 763.156383] ? sel_write_load+0x1de/0x470 [ 763.160549] vmalloc+0x6b/0x90 [ 763.163869] ? sel_write_load+0x1de/0x470 [ 763.168036] sel_write_load+0x1de/0x470 [ 763.172066] __vfs_write+0x114/0x810 [ 763.175911] ? sel_make_policy_nodes+0x1520/0x1520 [ 763.180883] ? kernel_read+0x120/0x120 [ 763.184785] ? __lock_is_held+0xb6/0x140 [ 763.188896] ? rcu_read_lock_sched_held+0x110/0x130 [ 763.193952] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 763.198991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.204557] ? __sb_start_write+0x1a9/0x360 [ 763.208905] vfs_write+0x20c/0x560 [ 763.212474] ksys_write+0x14f/0x2d0 [ 763.216143] ? __ia32_sys_read+0xb0/0xb0 [ 763.220382] ? do_syscall_64+0x26/0x620 [ 763.224376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.229766] ? do_syscall_64+0x26/0x620 [ 763.233785] __x64_sys_write+0x73/0xb0 [ 763.237695] do_syscall_64+0xfd/0x620 [ 763.241609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.246814] RIP: 0033:0x45aff9 [ 763.250032] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 763.269125] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.276859] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 763.284155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 763.291440] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 763.298739] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 03:33:56 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, 0x0, 0x0) 03:33:56 executing program 3: 03:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) 03:33:56 executing program 4: 03:33:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 763.306125] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c 03:33:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:56 executing program 4: 03:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 03:33:56 executing program 3: [ 763.413419] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 763.444558] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 763.477678] CPU: 0 PID: 25470 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 763.485538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.494915] Call Trace: [ 763.497523] dump_stack+0x197/0x210 [ 763.501291] warn_alloc.cold+0x7b/0x173 [ 763.505292] ? zone_watermark_ok_safe+0x260/0x260 [ 763.510181] ? lock_downgrade+0x880/0x880 [ 763.514451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.520116] ? avc_has_perm+0x404/0x610 03:33:56 executing program 3: 03:33:56 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x2]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) [ 763.524116] __vmalloc_node_range+0x486/0x790 [ 763.528643] ? sel_write_load+0x1de/0x470 [ 763.532892] vmalloc+0x6b/0x90 [ 763.536106] ? sel_write_load+0x1de/0x470 [ 763.540277] sel_write_load+0x1de/0x470 [ 763.544271] __vfs_write+0x114/0x810 [ 763.548009] ? sel_make_policy_nodes+0x1520/0x1520 [ 763.552960] ? kernel_read+0x120/0x120 [ 763.556869] ? __lock_is_held+0xb6/0x140 [ 763.560965] ? rcu_read_lock_sched_held+0x110/0x130 [ 763.566007] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 763.570788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 763.576346] ? __sb_start_write+0x1a9/0x360 [ 763.580696] vfs_write+0x20c/0x560 [ 763.584785] ksys_write+0x14f/0x2d0 [ 763.588548] ? __ia32_sys_read+0xb0/0xb0 [ 763.592653] ? do_syscall_64+0x26/0x620 [ 763.596647] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.602037] ? do_syscall_64+0x26/0x620 [ 763.606035] __x64_sys_write+0x73/0xb0 [ 763.609945] do_syscall_64+0xfd/0x620 [ 763.613773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 763.618977] RIP: 0033:0x45aff9 [ 763.622183] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 763.641098] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 763.648861] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 763.656168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 763.663455] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 763.670740] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 763.678023] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 763.702923] warn_alloc_show_mem: 1 callbacks suppressed [ 763.702928] Mem-Info: [ 763.711938] active_anon:217927 inactive_anon:200 isolated_anon:0 [ 763.711938] active_file:8598 inactive_file:38940 isolated_file:0 [ 763.711938] unevictable:0 dirty:137 writeback:0 unstable:0 [ 763.711938] slab_reclaimable:19127 slab_unreclaimable:108396 [ 763.711938] mapped:60487 shmem:246 pagetables:3223 bounce:0 [ 763.711938] free:1122107 free_pcp:620 free_cma:0 [ 763.746835] Node 0 active_anon:871708kB inactive_anon:800kB active_file:34244kB inactive_file:155760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241948kB dirty:544kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 763.776965] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 763.804989] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.831925] lowmem_reserve[]: 0 2545 2546 2546 2546 [ 763.836976] Node 0 DMA32 free:693892kB min:36168kB low:45208kB high:54248kB active_anon:871708kB inactive_anon:800kB active_file:34244kB inactive_file:155760kB unevictable:0kB writepending:544kB present:3129332kB managed:2609804kB mlocked:0kB kernel_stack:10336kB pagetables:12892kB bounce:0kB free_pcp:2572kB local_pcp:1364kB free_cma:0kB [ 763.867461] lowmem_reserve[]: 0 0 1 1 1 [ 763.871547] Node 0 Normal free:0kB min:12kB low:12kB high:12kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1140kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.897412] lowmem_reserve[]: 0 0 0 0 0 [ 763.901540] Node 1 Normal free:3780084kB min:53704kB low:67128kB high:80552kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 763.929949] lowmem_reserve[]: 0 0 0 0 0 [ 763.933968] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 763.947821] Node 0 DMA32: 999*4kB (UME) 376*8kB (UME) 190*16kB (UME) 1368*32kB (UME) 489*64kB (UM) 229*128kB (UM) 106*256kB (U) 49*512kB (UME) 29*1024kB (UME) 23*2048kB (UME) 110*4096kB (UM) = 694012kB [ 763.966074] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 763.977013] Node 1 Normal: 55*4kB (UE) 251*8kB (UME) 270*16kB (UE) 55*32kB (UE) 22*64kB (UME) 10*128kB (UE) 5*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3780084kB [ 763.994702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.003649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 764.012331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 764.021385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 03:33:57 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[], 0x0) 03:33:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x3]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@unspec=@realm={{0x30, 'realm\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) 03:33:57 executing program 3: 03:33:57 executing program 4: 03:33:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 764.030530] 47655 total pagecache pages [ 764.034572] 0 pages in swap cache [ 764.038013] Swap cache stats: add 0, delete 0, find 0/0 [ 764.043477] Free swap = 0kB [ 764.046507] Total swap = 0kB [ 764.049526] 1965979 pages RAM [ 764.052722] 0 pages HighMem/MovableOnly [ 764.056830] 341724 pages reserved [ 764.060361] 0 pages cma reserved 03:33:57 executing program 4: [ 764.101209] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:57 executing program 3: 03:33:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 03:33:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 764.155801] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 764.188000] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 764.202364] CPU: 0 PID: 25599 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 764.210204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.219610] Call Trace: [ 764.222397] dump_stack+0x197/0x210 [ 764.226055] warn_alloc.cold+0x7b/0x173 [ 764.230051] ? zone_watermark_ok_safe+0x260/0x260 [ 764.234913] ? lock_downgrade+0x880/0x880 [ 764.239086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.244639] ? avc_has_perm+0x404/0x610 [ 764.248639] __vmalloc_node_range+0x486/0x790 [ 764.253160] ? sel_write_load+0x1de/0x470 [ 764.257320] vmalloc+0x6b/0x90 [ 764.260536] ? sel_write_load+0x1de/0x470 [ 764.264704] sel_write_load+0x1de/0x470 [ 764.268698] __vfs_write+0x114/0x810 [ 764.272435] ? sel_make_policy_nodes+0x1520/0x1520 [ 764.277382] ? kernel_read+0x120/0x120 [ 764.281282] ? __lock_is_held+0xb6/0x140 [ 764.285365] ? rcu_read_lock_sched_held+0x110/0x130 [ 764.290407] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 764.295174] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.300726] ? __sb_start_write+0x1a9/0x360 03:33:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x5]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 764.305067] vfs_write+0x20c/0x560 [ 764.308625] ksys_write+0x14f/0x2d0 [ 764.312267] ? __ia32_sys_read+0xb0/0xb0 [ 764.316348] ? do_syscall_64+0x26/0x620 [ 764.320427] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.325912] ? do_syscall_64+0x26/0x620 [ 764.329918] __x64_sys_write+0x73/0xb0 [ 764.333822] do_syscall_64+0xfd/0x620 [ 764.337641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.342927] RIP: 0033:0x45aff9 [ 764.346132] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 764.365049] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.372778] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 764.380270] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 764.387560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 764.395119] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff 03:33:57 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[], 0x0) 03:33:57 executing program 3: 03:33:57 executing program 4: [ 764.402412] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 764.420542] xt_CT: You must specify a L4 protocol and not use inversions on it 03:33:57 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x6]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:57 executing program 3: 03:33:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 03:33:57 executing program 4: [ 764.564078] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 764.601616] xt_CT: You must specify a L4 protocol and not use inversions on it [ 764.613438] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 764.619121] CPU: 1 PID: 25919 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 764.626936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.636302] Call Trace: [ 764.638907] dump_stack+0x197/0x210 [ 764.642563] warn_alloc.cold+0x7b/0x173 [ 764.646561] ? zone_watermark_ok_safe+0x260/0x260 [ 764.651427] ? lock_downgrade+0x880/0x880 [ 764.655607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:33:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x8]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:58 executing program 4: [ 764.661168] ? avc_has_perm+0x404/0x610 [ 764.665169] __vmalloc_node_range+0x486/0x790 [ 764.669690] ? sel_write_load+0x1de/0x470 [ 764.674299] vmalloc+0x6b/0x90 [ 764.677512] ? sel_write_load+0x1de/0x470 [ 764.681680] sel_write_load+0x1de/0x470 [ 764.685855] __vfs_write+0x114/0x810 [ 764.689589] ? sel_make_policy_nodes+0x1520/0x1520 [ 764.694536] ? kernel_read+0x120/0x120 [ 764.698438] ? __lock_is_held+0xb6/0x140 [ 764.702617] ? rcu_read_lock_sched_held+0x110/0x130 [ 764.707644] ? rcu_sync_lockdep_assert+0x6d/0xb0 03:33:58 executing program 4: 03:33:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a94f, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x30]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 764.712410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 764.717961] ? __sb_start_write+0x1a9/0x360 [ 764.722300] vfs_write+0x20c/0x560 [ 764.725862] ksys_write+0x14f/0x2d0 [ 764.729509] ? __ia32_sys_read+0xb0/0xb0 [ 764.733588] ? do_syscall_64+0x26/0x620 [ 764.737581] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.742966] ? do_syscall_64+0x26/0x620 [ 764.746964] __x64_sys_write+0x73/0xb0 [ 764.750868] do_syscall_64+0xfd/0x620 [ 764.754687] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 764.759881] RIP: 0033:0x45aff9 [ 764.763093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 764.782784] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.789001] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 764.790504] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 764.790520] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 764.790530] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 764.790539] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 764.790552] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 764.841068] warn_alloc_show_mem: 1 callbacks suppressed [ 764.841073] Mem-Info: [ 764.858073] active_anon:219519 inactive_anon:198 isolated_anon:0 [ 764.858073] active_file:8599 inactive_file:38950 isolated_file:0 [ 764.858073] unevictable:0 dirty:149 writeback:0 unstable:0 [ 764.858073] slab_reclaimable:19190 slab_unreclaimable:107353 [ 764.858073] mapped:60471 shmem:246 pagetables:3287 bounce:0 [ 764.858073] free:1121481 free_pcp:489 free_cma:0 [ 764.894181] Node 0 active_anon:878076kB inactive_anon:792kB active_file:34248kB inactive_file:155800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241884kB dirty:592kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 237568kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 764.927007] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 764.930844] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 764.958690] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 764.986686] lowmem_reserve[]: 0 2545 2546 2546 2546 [ 764.991850] Node 0 DMA32 free:690972kB min:36168kB low:45208kB high:54248kB active_anon:878076kB inactive_anon:792kB active_file:34248kB inactive_file:155800kB unevictable:0kB writepending:592kB present:3129332kB managed:2609804kB mlocked:0kB kernel_stack:10432kB pagetables:13148kB bounce:0kB free_pcp:2008kB local_pcp:776kB free_cma:0kB [ 765.022027] lowmem_reserve[]: 0 0 1 1 1 [ 765.026064] Node 0 Normal free:0kB min:12kB low:12kB high:12kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1140kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.052951] lowmem_reserve[]: 0 0 0 0 0 [ 765.056946] Node 1 Normal free:3780084kB min:53704kB low:67128kB high:80552kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.084666] lowmem_reserve[]: 0 0 0 0 0 [ 765.088658] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 765.102315] Node 0 DMA32: 1029*4kB (UME) 464*8kB (UME) 245*16kB (UME) 1388*32kB (UME) 502*64kB (UM) 229*128kB (UM) 106*256kB (U) 49*512kB (UME) 29*1024kB (UME) 22*2048kB (UME) 109*4096kB (UM) = 691044kB [ 765.120622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 765.131436] Node 1 Normal: 55*4kB (UE) 251*8kB (UME) 270*16kB (UE) 55*32kB (UE) 22*64kB (UME) 10*128kB (UE) 5*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3780084kB [ 765.148400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.157335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.166008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.175043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.183752] 47665 total pagecache pages [ 765.187804] 0 pages in swap cache [ 765.191345] Swap cache stats: add 0, delete 0, find 0/0 [ 765.196760] Free swap = 0kB [ 765.199941] Total swap = 0kB [ 765.202971] 1965979 pages RAM [ 765.206129] 0 pages HighMem/MovableOnly [ 765.210278] 341724 pages reserved [ 765.213722] 0 pages cma reserved 03:33:58 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[], 0x0) 03:33:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x9]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {0x2, 0x3}, {0x2, 0x3}]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setscheduler(0x0, 0x5, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYPTR64, @ANYRES32, @ANYRES32, @ANYBLOB="3f8227d61339af09aecf883c38dc4460eb6166f311bb5fc7a5cbb856360bdec7487d003fe0ae2216a8639085d793852d3c528d", @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfdc7, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000180)={@remote}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r5}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={r5, @empty, @broadcast}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="08000000000000003759540d01ab34043c0c5dd3cb8ae68603d020ce89f347f8591d620000000000004f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439795fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463e725ffcc2357e053c0ba88cdce1e394b0c4896e51eec2510cf313e048bdfc66a909b2c74725babeb9abef9991ba14034a0f0c25ea352eb1d591151c21b5644fe8c324124ac48de197f7ce4f8c992bc70136ca23903674509ddecb59b352e2002d66cc0ab64f4", 0xcc, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@md5={0x1, "86a65d2b67a8121e923db32e8e11b4c6"}, 0x11, 0x5) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 03:33:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x248, 0x108, 0x0, 0x108, 0x0, 0x0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x1e0, 0x3, 0x0, {[{{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@ipvs={{0x48, 'ipvs\x00'}, {@ipv4=@broadcast}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) 03:33:58 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a94f, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x30]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) [ 765.265880] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 765.281561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.299922] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) 03:33:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xa]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 765.317140] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 765.326824] CPU: 1 PID: 26053 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 765.334658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.344110] Call Trace: [ 765.346720] dump_stack+0x197/0x210 [ 765.350373] warn_alloc.cold+0x7b/0x173 [ 765.354392] ? zone_watermark_ok_safe+0x260/0x260 [ 765.359257] ? lock_downgrade+0x880/0x880 [ 765.363428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.368980] ? avc_has_perm+0x404/0x610 [ 765.372979] __vmalloc_node_range+0x486/0x790 [ 765.377498] ? sel_write_load+0x1de/0x470 [ 765.381660] vmalloc+0x6b/0x90 [ 765.384875] ? sel_write_load+0x1de/0x470 [ 765.389044] sel_write_load+0x1de/0x470 [ 765.393043] __vfs_write+0x114/0x810 [ 765.396780] ? sel_make_policy_nodes+0x1520/0x1520 [ 765.401743] ? kernel_read+0x120/0x120 [ 765.405654] ? __lock_is_held+0xb6/0x140 [ 765.409777] ? rcu_read_lock_sched_held+0x110/0x130 03:33:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 765.414812] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 765.420804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.426355] ? __sb_start_write+0x1a9/0x360 [ 765.430702] vfs_write+0x20c/0x560 [ 765.434271] ksys_write+0x14f/0x2d0 [ 765.437916] ? __ia32_sys_read+0xb0/0xb0 [ 765.441993] ? do_syscall_64+0x26/0x620 [ 765.445981] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.451359] ? do_syscall_64+0x26/0x620 [ 765.455363] __x64_sys_write+0x73/0xb0 [ 765.459267] do_syscall_64+0xfd/0x620 [ 765.464034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.469222] RIP: 0033:0x45aff9 [ 765.472421] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.491537] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.499253] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 765.506539] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 03:33:58 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 03:33:58 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) [ 765.513822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 765.521562] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 765.521570] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c 03:33:58 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:33:59 executing program 4: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(r3, 0x10, &(0x7f0000000580)) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r4 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) [ 765.644472] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 765.706728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.715671] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 765.735468] CPU: 1 PID: 26365 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 765.743298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.752659] Call Trace: 03:33:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xc]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 765.755284] dump_stack+0x197/0x210 [ 765.758940] warn_alloc.cold+0x7b/0x173 [ 765.762938] ? zone_watermark_ok_safe+0x260/0x260 [ 765.767801] ? lock_downgrade+0x880/0x880 [ 765.771982] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.777538] ? avc_has_perm+0x404/0x610 [ 765.781543] __vmalloc_node_range+0x486/0x790 [ 765.786062] ? sel_write_load+0x1de/0x470 [ 765.790230] vmalloc+0x6b/0x90 [ 765.793455] ? sel_write_load+0x1de/0x470 [ 765.797633] sel_write_load+0x1de/0x470 [ 765.801635] __vfs_write+0x114/0x810 [ 765.805369] ? sel_make_policy_nodes+0x1520/0x1520 [ 765.810325] ? kernel_read+0x120/0x120 [ 765.814235] ? __lock_is_held+0xb6/0x140 [ 765.818324] ? rcu_read_lock_sched_held+0x110/0x130 [ 765.823356] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 765.828128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 765.833681] ? __sb_start_write+0x1a9/0x360 [ 765.838048] vfs_write+0x20c/0x560 [ 765.841608] ksys_write+0x14f/0x2d0 [ 765.845255] ? __ia32_sys_read+0xb0/0xb0 [ 765.849337] ? do_syscall_64+0x26/0x620 03:33:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 765.853327] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.858713] ? do_syscall_64+0x26/0x620 [ 765.862720] __x64_sys_write+0x73/0xb0 [ 765.866626] do_syscall_64+0xfd/0x620 [ 765.870458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 765.870472] RIP: 0033:0x45aff9 [ 765.870489] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 765.870498] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.870514] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 765.870523] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 765.870531] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 765.870540] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 765.870549] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 765.967789] warn_alloc_show_mem: 1 callbacks suppressed [ 765.967795] Mem-Info: [ 765.967834] active_anon:221641 inactive_anon:198 isolated_anon:0 [ 765.967834] active_file:8600 inactive_file:38961 isolated_file:0 [ 765.967834] unevictable:0 dirty:162 writeback:0 unstable:0 [ 765.967834] slab_reclaimable:19212 slab_unreclaimable:105641 [ 765.967834] mapped:60492 shmem:246 pagetables:3361 bounce:0 [ 765.967834] free:1120934 free_pcp:452 free_cma:0 [ 765.967866] Node 0 active_anon:886564kB inactive_anon:792kB active_file:34252kB inactive_file:155844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241968kB dirty:644kB writeback:0kB shmem:984kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 247808kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 765.967902] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 765.968059] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.968097] lowmem_reserve[]: 0 2545 2546 2546 2546 [ 765.968132] Node 0 DMA32 free:687744kB min:36168kB low:45208kB high:54248kB active_anon:886564kB inactive_anon:792kB active_file:34252kB inactive_file:155844kB unevictable:0kB writepending:644kB present:3129332kB managed:2609804kB mlocked:0kB kernel_stack:10592kB pagetables:13444kB bounce:0kB free_pcp:1808kB local_pcp:576kB free_cma:0kB [ 765.968175] lowmem_reserve[]: 0 0 1 1 1 [ 765.968194] Node 0 Normal free:0kB min:12kB low:12kB high:12kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:1140kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.968229] lowmem_reserve[]: 0 0 0 0 0 [ 765.968247] Node 1 Normal free:3780084kB min:53704kB low:67128kB high:80552kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870168kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.968282] lowmem_reserve[]: 0 0 0 0 0 [ 765.968303] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 765.968383] Node 0 DMA32: 1038*4kB (UME) 462*8kB (UME) 326*16kB (UME) 1425*32kB (UME) 532*64kB (UM) 232*128kB (UM) 106*256kB (U) 49*512kB (UME) 29*1024kB (UME) 22*2048kB (UME) 107*4096kB (UM) = 687656kB [ 765.968472] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 765.968527] Node 1 Normal: 55*4kB (UE) 251*8kB (UME) 270*16kB (UE) 55*32kB (UE) 22*64kB (UME) 10*128kB (UE) 5*256kB (UM) 3*512kB (ME) 4*1024kB (UM) 1*2048kB (U) 918*4096kB (M) = 3780084kB [ 765.968622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.968634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.968646] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.968656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 765.968662] 47677 total pagecache pages [ 765.968678] 0 pages in swap cache 03:33:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {0x2, 0x3}, {0x2, 0x3}]}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sched_setscheduler(0x0, 0x5, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYPTR64, @ANYRES32, @ANYRES32, @ANYBLOB="3f8227d61339af09aecf883c38dc4460eb6166f311bb5fc7a5cbb856360bdec7487d003fe0ae2216a8639085d793852d3c528d", @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xfdc7, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f0000000180)={@remote}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, r5}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000004c0)={r5, @empty, @broadcast}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000006c0)="08000000000000003759540d01ab34043c0c5dd3cb8ae68603d020ce89f347f8591d620000000000004f9a72c09ed607aaa5aebe2498570ca5d2d11eadfec8ef98f956a77dd104439795fb62f2aa8e3d83b831c272c31f4412f90df7203dd222f0652c485463e725ffcc2357e053c0ba88cdce1e394b0c4896e51eec2510cf313e048bdfc66a909b2c74725babeb9abef9991ba14034a0f0c25ea352eb1d591151c21b5644fe8c324124ac48de197f7ce4f8c992bc70136ca23903674509ddecb59b352e2002d66cc0ab64f4", 0xcc, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@md5={0x1, "86a65d2b67a8121e923db32e8e11b4c6"}, 0x11, 0x5) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) 03:33:59 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 03:33:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xe]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:59 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x200000011002, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x202, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f00000003c0)=""/223) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x3b0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="21000000100005070000000000000000000000004447d0970a8671a872bfe13bddebaccf382cac4a3381ffdd481d0351371447f08a91ec8679ee49f036c703e043c3a166be17c6b7e65b48086a00b5b25a2af853bd0fb8cef61a5d6bbeef274eaffe6d3db0ae9f22d14126d0a5d69e85840062dd40e800e1bf0d5750b127cdba13447270fbe456507400023b01ec5f43fc6456f9dc42f9dbbc8dcdacac69", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d3d00"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xf7, r7, 0x1, 0x6, 0x6, @remote}, 0x14) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x3) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000040)=0x8) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r9, 0x8919, &(0x7f0000000280)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c") 03:33:59 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x17d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 03:33:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 765.968687] Swap cache stats: add 0, delete 0, find 0/0 [ 765.968692] Free swap = 0kB [ 765.968698] Total swap = 0kB [ 765.968707] 1965979 pages RAM [ 765.968712] 0 pages HighMem/MovableOnly [ 765.968717] 341724 pages reserved [ 765.968722] 0 pages cma reserved 03:33:59 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x17d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) [ 766.458639] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 766.497131] syz-executor.0 cpuset=syz0 mems_allowed=0-1 03:33:59 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:33:59 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) [ 766.521020] CPU: 0 PID: 26695 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 766.528877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 03:33:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 766.528884] Call Trace: [ 766.528911] dump_stack+0x197/0x210 03:34:00 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000000000002, 0x200) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000340), 0x4) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000080)={'hsr0\x00', 0x8000}) close(r5) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x200000011002, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x202, 0x0) ioctl$ASHMEM_GET_NAME(r6, 0x81007702, &(0x7f00000003c0)=""/223) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x3b0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4001) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="21000000100005070000000000000000000000004447d0970a8671a872bfe13bddebaccf382cac4a3381ffdd481d0351371447f08a91ec8679ee49f036c703e043c3a166be17c6b7e65b48086a00b5b25a2af853bd0fb8cef61a5d6bbeef274eaffe6d3db0ae9f22d14126d0a5d69e85840062dd40e800e1bf0d5750b127cdba13447270fbe456507400023b01ec5f43fc6456f9dc42f9dbbc8dcdacac69", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d3d00"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0xf7, r7, 0x1, 0x6, 0x6, @remote}, 0x14) read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x3) ioctl$int_in(0xffffffffffffffff, 0x800000c0045009, &(0x7f0000000040)=0x8) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x79, 0x2}, 0x7) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'bridge_slave_1\x00', {0x2, 0x4e22, @remote}}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8642957429963afb, @perf_bp={0x0, 0x8}, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) clone(0x0, 0x0, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)="18f60a2111586ff65f2573aab50febd1d64fbb4158f63355602481443fece7a1f642d7754be2dbbcd0a5afdcf5e5f5fa7bac7fa790a735e74bb290d2ccdd91d9eacb6ed623261827e03be7b7622d9dabee3c4c") 03:34:00 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) [ 766.528936] warn_alloc.cold+0x7b/0x173 [ 766.528958] ? zone_watermark_ok_safe+0x260/0x260 [ 766.528977] ? lock_downgrade+0x880/0x880 [ 766.529004] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.529019] ? avc_has_perm+0x404/0x610 [ 766.529047] __vmalloc_node_range+0x486/0x790 [ 766.529068] ? sel_write_load+0x1de/0x470 [ 766.529084] vmalloc+0x6b/0x90 [ 766.529100] ? sel_write_load+0x1de/0x470 [ 766.529118] sel_write_load+0x1de/0x470 [ 766.529140] __vfs_write+0x114/0x810 [ 766.529158] ? sel_make_policy_nodes+0x1520/0x1520 [ 766.529174] ? kernel_read+0x120/0x120 [ 766.529225] ? __lock_is_held+0xb6/0x140 [ 766.529264] ? rcu_read_lock_sched_held+0x110/0x130 [ 766.529283] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 766.529301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.529314] ? __sb_start_write+0x1a9/0x360 [ 766.529332] vfs_write+0x20c/0x560 [ 766.529355] ksys_write+0x14f/0x2d0 [ 766.529375] ? __ia32_sys_read+0xb0/0xb0 [ 766.529394] ? do_syscall_64+0x26/0x620 [ 766.529410] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.529424] ? do_syscall_64+0x26/0x620 [ 766.529446] __x64_sys_write+0x73/0xb0 [ 766.529465] do_syscall_64+0xfd/0x620 [ 766.529482] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.529495] RIP: 0033:0x45aff9 [ 766.529512] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.529521] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 766.529535] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 766.529545] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 766.529554] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 766.529563] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 766.529574] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 766.642819] syz-executor.0: vmalloc: allocation failure: 0 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 766.642831] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 766.642864] CPU: 0 PID: 26911 Comm: syz-executor.0 Not tainted 4.19.96-syzkaller #0 [ 766.642874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.642880] Call Trace: [ 766.642901] dump_stack+0x197/0x210 [ 766.642927] warn_alloc.cold+0x7b/0x173 [ 766.642955] ? zone_watermark_ok_safe+0x260/0x260 [ 766.642976] ? lock_downgrade+0x880/0x880 [ 766.643003] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.643020] ? avc_has_perm+0x404/0x610 [ 766.643048] __vmalloc_node_range+0x486/0x790 [ 766.643071] ? sel_write_load+0x1de/0x470 [ 766.643088] vmalloc+0x6b/0x90 [ 766.643104] ? sel_write_load+0x1de/0x470 [ 766.643121] sel_write_load+0x1de/0x470 [ 766.643143] __vfs_write+0x114/0x810 [ 766.643162] ? sel_make_policy_nodes+0x1520/0x1520 [ 766.643178] ? kernel_read+0x120/0x120 [ 766.643198] ? __lock_is_held+0xb6/0x140 [ 766.643234] ? rcu_read_lock_sched_held+0x110/0x130 [ 766.643254] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 766.643268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 766.643283] ? __sb_start_write+0x1a9/0x360 [ 766.643303] vfs_write+0x20c/0x560 [ 766.643327] ksys_write+0x14f/0x2d0 [ 766.643348] ? __ia32_sys_read+0xb0/0xb0 [ 766.643367] ? do_syscall_64+0x26/0x620 [ 766.643383] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.643398] ? do_syscall_64+0x26/0x620 [ 766.643421] __x64_sys_write+0x73/0xb0 [ 766.643440] do_syscall_64+0xfd/0x620 [ 766.643460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 766.643472] RIP: 0033:0x45aff9 [ 766.643488] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 766.643496] RSP: 002b:00007f0135ca1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 03:34:00 executing program 3: socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x28f5c}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:00 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x2f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)}) alarm(0x9) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/127, 0x1a0, 0x40000000, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a00000008000000023a000f0a000000030000000000000000dd063637fb6f97ab9bf15276a045f2fffff2000000000000000f030000"], &(0x7f0000000380)=""/249, 0x4a, 0xf9, 0x8}, 0x20) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000300)) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000240)=0xfff, 0x4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x6000, 0x0) 03:34:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x10]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:00 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) 03:34:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0xbd797ef2, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="e8", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 766.643511] RAX: ffffffffffffffda RBX: 00007f0135ca26d4 RCX: 000000000045aff9 [ 766.643520] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 766.643529] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 766.643538] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 766.643547] R13: 0000000000000c78 R14: 00000000004cd234 R15: 000000000075bf2c [ 766.772393] SELinux: failed to load policy [ 767.253539] xt_ct_set_helper: 3 callbacks suppressed [ 767.253546] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x38]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 767.300130] SELinux: failed to load policy 03:34:00 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) 03:34:00 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0x8004500b, &(0x7f00000000c0)) [ 767.337546] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 767.397106] xt_time: invalid argument - start or stop time greater than 23:59:59 03:34:00 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x60]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:00 executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x1004) 03:34:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:00 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 767.472552] SELinux: failed to load policy 03:34:00 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 03:34:00 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 03:34:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a94f, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x30]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 03:34:01 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0x80045005, &(0x7f00000000c0)) [ 767.577321] SELinux: failed to load policy [ 767.591576] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 767.690079] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 767.704142] SELinux: failed to load policy 03:34:01 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:34:01 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x300]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 767.796709] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 03:34:01 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/165, 0x3}], 0x14e) [ 767.841588] SELinux: failed to load policy 03:34:01 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 03:34:01 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20200, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000540)='mountinfo\x00') lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r4 = socket(0x6, 0x80002, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) listen(r3, 0x20000000) r6 = socket$inet6(0xa, 0x6, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000280)=ANY=[@ANYBLOB="03a90000100040000a84830f8f83040d80878b8b0288808a"]) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r6, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x1, 0x0) 03:34:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000680), r1, 0x1}}, 0x18) 03:34:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:01 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x4cb]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 767.988115] SELinux: failed to load policy 03:34:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0xbd797ef2, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 768.037179] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:01 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, 0x0) lchown(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e") writev(0xffffffffffffffff, &(0x7f00000002c0), 0x0) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000300)={0x13, 0x10, 0x7, {0x0, r1, 0x1}}, 0x18) 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x500]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 768.169665] SELinux: failed to load policy 03:34:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:01 executing program 0: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) 03:34:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002780)=[{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000100)="3f8b57b53cb67fcddd912da20be3f8619b00ac502b38d4ecc230c167f9e17d8e8ccba7303ef7384dfb9b543120529a0a66a4d8e2", 0x34}, {&(0x7f0000000140)="70c05a5a9bac774265dd661ec6787b929f43fce6d1e05419f53b5fd41f4c86016edc8b2889de9d8bf973db678b86577707fd7a498d6b8d8c73410d56b9fdbeb6834de577f818335486e37c257778e70eaa63b856ff", 0x55}, {&(0x7f0000002980)="db2a05834064d7d7096db757b20467f47265b9fe7a382dc3db07740591", 0x1d}], 0x3, &(0x7f0000001280)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0xfcec}], 0x1}, 0x0) 03:34:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000, 0x1000000}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0xffffff7f0e000000}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x600]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:01 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x10]}}, 0x80, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000200)=0xbd797ef2, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0185879, &(0x7f0000000080)) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000000)) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r3, 0x8, 0x0, 0x10000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 768.345632] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:01 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 768.393925] SELinux: failed to load policy 03:34:01 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) write$P9_RSTAT(r0, 0x0, 0x0) 03:34:01 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x900]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 768.548408] input: syz0 as /devices/virtual/input/input10 03:34:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = dup(r0) mkdirat(r1, &(0x7f0000000280)='./file1\x00', 0x0) 03:34:01 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$P9_RSTAT(r1, 0x0, 0x0) 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xa00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:02 executing program 4: semget(0x1, 0x0, 0x200) [ 768.660020] input: syz0 as /devices/virtual/input/input11 [ 768.676870] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:02 executing program 3: socket$kcm(0x2, 0x20000000002, 0x73) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000ffd800d475907c03147eb156244fc984cf07064a288ef5d0bcde93bceaf9298ff2d14fb7287982e128f2543d36b169bd0c3ec465e17cae1411e932effc4da4f647f6beed3480a3658bf01216b53675d61d615f79b195476be4a2f3a4c71d525b5b3cf0834860a9c56c871fee220000743026c204b4e53aa8692a00da31061cc5f5c1c0687ba57a632f15ed2cfbdb41fc7db0"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x270, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x1000, &(0x7f0000000100)="a4dbae5a340ce56385b874bfe370", &(0x7f0000002040)=""/4096}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x400c00) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 03:34:02 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12}, 0x6a) 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xb00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000fff000/0x1000)=nil}) 03:34:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 768.911752] input: syz0 as /devices/virtual/input/input12 [ 768.922933] input: syz0 as /devices/virtual/input/input13 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xc00]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 768.997724] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) bind$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) close(0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x0, 0x800) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) write$P9_RCREATE(r2, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f00000000c0)={0x0, 0x66, 0x9, 0x5}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c81, 0xfffffffffffffffe) 03:34:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0xaaaaaaaaaaaacaa, 0x0, 0x0, 0xfffffffffffffd92) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xe00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x300, 0x0, &(0x7f0000fff000/0x1000)=nil}) 03:34:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf00]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 769.248707] input: syz0 as /devices/virtual/input/input15 [ 769.276319] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:02 executing program 3: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) ftruncate(r0, 0x8200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xbb8) 03:34:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x3800]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:02 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 769.469173] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:02 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x3f00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x2a4) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x39, 0x0) 03:34:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:03 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 769.630053] input: syz0 as /devices/virtual/input/input16 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x5865]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 769.724478] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x6000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:03 executing program 4: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000280)='.\x00', 0x2a4) open(&(0x7f0000000000)='./bus\x00', 0x4000000000141042, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) splice(r1, 0x0, r0, 0x0, 0x39, 0x0) 03:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) pipe(0x0) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@get={0xe0, 0x13, 0xffff, 0x0, 0x0, {{'drbg_pr_hmac_sha256\x00'}, [0xf]}}, 0xe0}}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xfbf, 0x0) 03:34:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@get={0xe0, 0x13, 0xffff, 0x0, 0x0, {{'drbg_pr_hmac_sha256\x00'}, [0xf]}}, 0xe0}}, 0x0) [ 769.976841] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:03 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000003000), 0xffffff92) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x6558]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 770.007404] audit: type=1400 audit(2000000043.360:122): avc: denied { write } for pid=29175 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 03:34:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r1, 0xdaa3b002485c5b6d, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:03 executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r2, @ANYBLOB="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"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 03:34:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x8100]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xcb04]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:03 executing program 3: socket$packet(0x11, 0x4000000000000a, 0x300) syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c286dd60e2c38300442900fe880000000000000000000000000001ff02000000d0bd0daabf9e9e00000000000000000000013420880b0000000000000800000086dd080088be00000000100000000000080022eb000000002000000002f7dccd89e152056400000000000000000400000800655800"/137], 0x0) 03:34:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0xaaaaaaaaaaaacaa, 0x0, 0x0, 0xfffffffffffffd92) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:03 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:03 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:04 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @local, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev}, {0x0, 0x1b59, 0x24, 0x0, [@guehdr={0x1, 0x0, 0x0, 0x0, 0x0, @void}, @guehdr={0x2}, @guehdr={0x1, 0x0, 0x0, 0x0, 0x0, @void}, @guehdr={0x1, 0x0, 0x0, 0x0, 0x0, @void}, @guehdr={0x3, 0x0, 0x0, 0x3, 0x0, @void}], "44dd76fa"}}}}}, 0x0) 03:34:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0xaaaaaaaaaaaacaa, 0x0, 0x0, 0xfffffffffffffd92) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) getpid() getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)=ANY=[@ANYBLOB="ab000000a6d23fa0"], &(0x7f0000000540)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x34000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1a94f, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x707, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, [@IFLA_LINKINFO={0x14, 0x12, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x30]}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 03:34:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x400300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0xaaaaaaaaaaaacaa, 0x0, 0x0, 0xfffffffffffffd92) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') add_key(&(0x7f00000000c0)='blacklist\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 770.921649] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 770.923859] input: syz0 as /devices/virtual/input/input23 03:34:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 770.992826] device macvlan2 entered promiscuous mode [ 771.026878] device vlan1 entered promiscuous mode 03:34:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:04 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setuid(0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) [ 771.078744] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 03:34:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf0ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8ec0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]}) [ 771.157660] device macvlan3 entered promiscuous mode [ 771.179040] input: syz0 as /devices/virtual/input/input24 03:34:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x1000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:04 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0xe, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) [ 771.360291] input: syz0 as /devices/virtual/input/input25 [ 771.379332] audit: type=1326 audit(2000000044.730:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=219 compat=0 ip=0x45aff9 code=0x50000 [ 771.462661] audit: type=1326 audit(2000000044.730:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45de3a code=0x50000 03:34:04 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x2000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:04 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 771.496543] audit: type=1326 audit(2000000044.730:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45aff9 code=0x50000 [ 771.581140] input: syz0 as /devices/virtual/input/input26 [ 771.596717] audit: type=1326 audit(2000000044.730:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45de3a code=0x50000 03:34:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f0014f9f40700090400020000000100000400000000080001", 0x1f) close(r2) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x99a3b0cf) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 03:34:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x8001]}) 03:34:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 771.685809] audit: type=1326 audit(2000000044.730:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45aff9 code=0x50000 03:34:05 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x3000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 771.720062] audit: type=1326 audit(2000000044.730:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45de3a code=0x50000 03:34:05 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 771.772126] audit: type=1326 audit(2000000044.730:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45aff9 code=0x50000 [ 771.882075] input: syz0 as /devices/virtual/input/input27 [ 771.914111] audit: type=1326 audit(2000000044.730:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45de3a code=0x50000 [ 771.942082] audit: type=1326 audit(2000000044.730:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=30184 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x45aff9 code=0x50000 03:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x4000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:07 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x200080002, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x20, 0x12, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0x8, 0x5, [@IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x40}}, 0x0) 03:34:07 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=0x0}) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") 03:34:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x5000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 774.310936] xt_ct_set_helper: 7 callbacks suppressed [ 774.310943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.341281] input: syz0 as /devices/virtual/input/input28 03:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:07 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x6000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xd85, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 03:34:07 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) close(r1) [ 774.554841] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 774.616441] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x8000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:08 executing program 4: 03:34:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:08 executing program 4: 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x9000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 774.780119] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:08 executing program 4: 03:34:08 executing program 2: 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xa000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:08 executing program 0: socket(0x10, 0x80002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 2: 03:34:08 executing program 4: 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xb000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 775.043680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.057773] input: syz0 as /devices/virtual/input/input29 03:34:08 executing program 2: 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:08 executing program 0: socket(0x10, 0x80002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:08 executing program 4: 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xc000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:08 executing program 2: 03:34:08 executing program 4: [ 775.281795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.298368] input: syz0 as /devices/virtual/input/input30 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xe000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:08 executing program 2: 03:34:08 executing program 4: 03:34:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:08 executing program 0: socket(0x10, 0x80002, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:08 executing program 2: 03:34:08 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:08 executing program 4: [ 775.534132] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:08 executing program 2: 03:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) [ 775.588130] input: syz0 as /devices/virtual/input/input31 03:34:09 executing program 4: 03:34:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x10000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:09 executing program 2: 03:34:09 executing program 4: [ 775.798706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 775.829868] input: syz0 as /devices/virtual/input/input32 03:34:09 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x20000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:09 executing program 4: 03:34:09 executing program 2: 03:34:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:09 executing program 2: 03:34:09 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:09 executing program 4: 03:34:09 executing program 2: 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x38000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 776.067084] input: syz0 as /devices/virtual/input/input33 [ 776.099099] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:09 executing program 4: 03:34:09 executing program 2: 03:34:09 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:09 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:09 executing program 2: 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x3f000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:09 executing program 4: [ 776.337865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.346660] input: syz0 as /devices/virtual/input/input34 03:34:09 executing program 2: 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x60000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:09 executing program 4: 03:34:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:09 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:09 executing program 2: 03:34:09 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x65580000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 776.569211] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 2: 03:34:10 executing program 4: [ 776.637719] input: syz0 as /devices/virtual/input/input35 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x81000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 2: 03:34:10 executing program 4: 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:10 executing program 2: 03:34:10 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x88a8ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 4: 03:34:10 executing program 2: 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 2: 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x9effffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 776.979332] input: syz0 as /devices/virtual/input/input36 03:34:10 executing program 4: 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 2: 03:34:10 executing program 0: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xcb040000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 4: 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 2: [ 777.218517] input: syz0 as /devices/virtual/input/input37 03:34:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xf0ffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 2: 03:34:10 executing program 4: 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:10 executing program 4: 03:34:10 executing program 2: 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfcffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:10 executing program 2: 03:34:10 executing program 4: [ 777.542346] input: syz0 as /devices/virtual/input/input38 03:34:10 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xffffa888]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:11 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0xfffc}, 0xff83) 03:34:11 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 03:34:11 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffff000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:11 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000680)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x200}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) [ 777.793699] input: syz0 as /devices/virtual/input/input39 03:34:11 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x19, &(0x7f0000000180)={r6}, 0x8) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xffffff7f]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:11 executing program 0: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:11 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "add088e814b8ceae63f1fe1723fa6a4c84bd32"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:34:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xffffff9e]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) [ 778.101231] input: syz0 as /devices/virtual/input/input40 [ 778.147929] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 [ 778.171092] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 03:34:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 778.171147] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000018 data 0x18 03:34:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffff0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:11 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 778.171202] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 [ 778.171255] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000058 data 0x0 03:34:11 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) [ 778.171309] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000028 data 0x10 [ 778.171433] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000078 data 0x10 03:34:11 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 778.171483] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000008 data 0x30 [ 778.171613] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000058 data 0x30 03:34:11 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 778.171672] kvm [32656]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000048 data 0x0 [ 778.366777] input: syz0 as /devices/virtual/input/input41 03:34:11 executing program 2: sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x40, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) init_module(&(0x7f00000000c0)='\x00', 0x1, &(0x7f0000000100)='/dev/kvm\x00') syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 03:34:11 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 778.655911] input: syz0 as /devices/virtual/input/input42 03:34:12 executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f0000000180)={r6}, 0x8) 03:34:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:12 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x488, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e8) 03:34:12 executing program 0: socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 03:34:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xffffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 779.139964] input: syz0 as /devices/virtual/input/input43 03:34:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 03:34:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x12) 03:34:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:12 executing program 2: io_setup(0x9, &(0x7f0000000180)=0x0) io_getevents(r0, 0x3, 0x0, 0x0, 0x0) 03:34:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 03:34:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x2]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:12 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8915, 0x0) [ 779.372207] xt_ct_set_helper: 9 callbacks suppressed [ 779.372215] xt_CT: You must specify a L4 protocol and not use inversions on it [ 779.408941] input: syz0 as /devices/virtual/input/input44 03:34:12 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x3]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 03:34:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:12 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x890c, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 03:34:12 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 779.627508] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x438, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:13 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0xcc, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r1, r2) [ 779.669345] input: syz0 as /devices/virtual/input/input45 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x438, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 03:34:13 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x5]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 779.877167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 779.906853] input: syz0 as /devices/virtual/input/input46 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x438, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00'}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) 03:34:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='-']}) 03:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x6]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 03:34:13 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:13 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00007a6000/0x4000)=nil, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000b9a000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 780.091417] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:13 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$inet6(r0, &(0x7f00000026c0)=[{{&(0x7f0000002380)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c, 0x0}}], 0x1, 0x0) 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x8]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 780.181617] input: syz0 as /devices/virtual/input/input47 03:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 780.228544] kauditd_printk_skb: 10261 callbacks suppressed [ 780.228563] audit: type=1400 audit(2000000053.580:10393): avc: denied { map } for pid=1527 comm="syz-executor.2" path="socket:[189576]" dev="sockfs" ino=189576 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x9]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:13 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 780.315606] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:13 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="847f32b7cdcb"}, 0x10) 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x2e8, 0x0, 0x2e8, 0x2e8, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 03:34:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:13 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xa]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:13 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b1, &(0x7f0000000040)={'vxcan1\x00'}) 03:34:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8992, &(0x7f0000000040)={'vxcan1\x00'}) [ 780.480267] input: syz0 as /devices/virtual/input/input48 [ 780.516009] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:13 executing program 3: syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x4000) 03:34:14 executing program 4: ioprio_set$pid(0x1, 0x0, 0x0) clone(0xa2040500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) 03:34:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000280)) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffff0000003fffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 03:34:14 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x2500) [ 780.706369] input: syz0 as /devices/virtual/input/input49 03:34:14 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7d, &(0x7f0000000180)={r6}, 0x8) [ 780.772852] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xc]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:14 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x8508}, {r3}, {r4}], 0x3, 0x0, 0x0, 0x0) 03:34:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x0, 0x0, 0x0, 0x3f]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xe]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 780.967668] input: syz0 as /devices/virtual/input/input50 03:34:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) [ 781.029167] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x1, 0x0, @ioapic={0x3000, 0x0, 0x5, 0x0, 0x0, [{}, {0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x12}, {0x0, 0xdc}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:14 executing program 4: syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80020000000000000000000000000000800000f9ffffffff8000000000000000821c000001000010000000000100000000000006c034a40200010000100700000000000000000000000c0908040c", 0x7d}], 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 03:34:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) 03:34:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 781.211346] input: syz0 as /devices/virtual/input/input51 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x10]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:14 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x1) 03:34:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='cdg\x00', 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x4) [ 781.316895] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:14 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x18) 03:34:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x0, 0x0, &(0x7f0000000180)}) 03:34:14 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x38]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 781.462376] input: syz0 as /devices/virtual/input/input52 03:34:14 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r3, 0x540d) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x40, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) init_module(&(0x7f00000000c0)='\x00', 0x1, &(0x7f0000000100)='/dev/kvm\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:34:14 executing program 2: ioprio_set$pid(0x1, 0x0, 0x0) clone(0xa20c0500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 03:34:14 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x0, [], 0xa}) [ 781.551838] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:14 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:15 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x77, &(0x7f0000000180)={r6}, 0x8) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x60]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 781.684396] input: syz0 as /devices/virtual/input/input53 03:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:15 executing program 3: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000140)='.', 0x0, 0x5110, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) 03:34:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x8918, 0x0) [ 781.938626] input: syz0 as /devices/virtual/input/input54 [ 781.974911] kvm: pic: non byte write 03:34:15 executing program 3: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r0, 0x80045440, &(0x7f0000000140)) [ 781.994904] kvm: pic: non byte write [ 782.005399] kvm: pic: non byte write [ 782.010919] kvm: pic: non byte write [ 782.016216] kvm: pic: non byte write [ 782.022226] kvm: pic: non byte write [ 782.026605] kvm: pic: non byte write [ 782.031470] kvm: pic: non byte write [ 782.035779] kvm: pic: non byte write [ 782.040636] kvm: pic: non byte write 03:34:15 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGDEV(r0, 0x5416, 0x0) 03:34:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:15 executing program 2: syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824", 0x5}, {&(0x7f0000000040)="53000000fcffffff7700000000c0030000009600000000000000a40000000000000000", 0x23}], 0x2) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x4cb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001b96bde99a302c33d2db6e1a5317c4447ff5be2587283723db86d4c6118da6bcb530e81fb270a18cfdedbb2a26fbf848bc371ab944a9f93caae91f2771d6ec8a7ca92e6d3330b20003a1d79e8e764794402e14e7a47316ee6b2281816cf6b6d0757", @ANYRES32, @ANYBLOB="04000200"], 0x20}}, 0x0) 03:34:15 executing program 2: syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824", 0x5}, {&(0x7f0000000040)="53000000fcffffff7700000000c0030000009600000000000000a40000000000000000", 0x23}], 0x2) [ 782.220312] input: syz0 as /devices/virtual/input/input55 03:34:15 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "018000da7d469c04", "02a839a6c7986edc3f8a6200c88e37de79b97525cedefaa0bded32e7d887ec99", "0000ef00", "00943f4aece800"}, 0x38) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000740)="81", 0x1, 0x0, 0x0, 0x0) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x500]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 782.358896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 782.416456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x600]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 2: syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824", 0x5}, {&(0x7f0000000040)="53000000fcffffff7700000000c0030000009600000000000000a40000000000000000", 0x23}], 0x2) 03:34:15 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x79, &(0x7f0000000180)={r6}, 0x8) [ 782.461134] input: syz0 as /devices/virtual/input/input56 03:34:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:15 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x900]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:15 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:16 executing program 2: syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x6, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824", 0x5}, {&(0x7f0000000040)="53000000fcffffff7700000000c0030000009600000000000000a40000000000000000", 0x23}], 0x2) 03:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xa00]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 782.720527] input: syz0 as /devices/virtual/input/input57 03:34:16 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x210a00, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x40, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) init_module(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0xa3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 03:34:16 executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x15, 0x0, 0x0) 03:34:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:16 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}) 03:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xb00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x158, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 783.213204] input: syz0 as /devices/virtual/input/input58 03:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xc00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:16 executing program 2: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r0, 0x402, 0x1) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r1, 0x402, 0x1) r2 = syz_open_procfs(0x0, 0xffffffffffffffff) fcntl$notify(r2, 0x402, 0x1) 03:34:16 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xe00]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 783.527972] input: syz0 as /devices/virtual/input/input59 03:34:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xaf026a9383fa03b}, 0xc) 03:34:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x3fe00) 03:34:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="e417391fa0663113b3384ba201bc06f44228fbad09b6", @ANYRES16, @ANYBLOB="000328bd7000fedbdf25040000000800010001000000080001000300000008000100020000000800020002000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) [ 783.860736] input: syz0 as /devices/virtual/input/input60 03:34:17 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e0, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) [ 783.894157] audit: type=1804 audit(2000000057.250:10394): pid=3848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir585684852/syzkaller.Rmqnln/167/file0" dev="sda1" ino=16938 res=1 03:34:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:17 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x3800]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86970") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22c, 0xfffffffffffffe7f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001bffffff00004000632f77fbac141411e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1880425181aa5", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffe09}, 0x28) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x3f00]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 784.191447] input: syz0 as /devices/virtual/input/input61 03:34:17 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendto$llc(r0, 0x0, 0x0, 0xbd5b9a1808399753, 0x0, 0x0) 03:34:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:34:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x5865]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@fat=@tz_utc='tz=UTC'}]}) 03:34:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:17 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="580000001400add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x6000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 784.504045] xt_ct_set_helper: 9 callbacks suppressed [ 784.504053] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:17 executing program 3: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r0) 03:34:17 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x891a, 0x0) 03:34:17 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x6558]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:18 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$zero(0xffffffffffffff9c, 0x0, 0x210a00, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) init_module(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:34:18 executing program 4: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000100)="f30f093e660f013c66b9280a00000f32dcf6dde40f2210f2c00d100fc7aa0070260f01cbf30f09", 0x27}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x8100]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:18 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c06639d476a0bf", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000000)="9a2174f614c9e97f3a7a61763cc6e5032be59718a1b00be4ad17a039b5da9a87bff09bf0e210d47f7e2a804a174ee570b30788c9ae12a54f2a2239eaa8314f235c90ae36a6ab0490c2d73b65e544693b74e2eeda400eae3e606bd0ff0f33000b5220e18fe5", 0x65, 0x8034, 0x0, 0x0) [ 784.776379] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xcb04]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 785.030392] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:18 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000100)="f30f093e660f013c66b9280a00000f32dcf6dde40f2210f2c00d100fc7aa0070260f01cbf30f09", 0x27}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:34:18 executing program 4: sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000700010066710000340002000800070000010000080006000000000008000400000000000800080000000000080001000000000008000300000000004a83bbcd97fb91b3b57fa9bd2810a347a34e03643a3c5c6b25caffa9fd141476dd041c5b0b9662cd9fb075c7f418e3b9a3d22a5b156fe3f75a61a1aa4d1a39bdb19f5aa6eeeb07563388976c971c6fad98ec1b2a0a40b01390b807fbc148429b0e179aedc5230a79aa287dc36afe0214552f1e7e2c5e380de4096fa82a4764ffe558eeb4c1bd19fbe64f2c2988d9003739f4dc32f88cb972e7333ebecc430716ed3dac4ce61ad690d1c999173d8996fe30ff13b0b875acfd5f41f830cb"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 03:34:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x3) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) openat$zero(0xffffffffffffff9c, 0x0, 0x210a00, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) init_module(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) 03:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x34000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:19 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000080)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) 03:34:19 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 785.697076] input: syz0 as /devices/virtual/input/input65 [ 785.704105] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x400300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 785.832397] kvm_hv_set_msr: 81 callbacks suppressed [ 785.832414] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 03:34:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf0ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 785.918966] xt_CT: You must specify a L4 protocol and not use inversions on it [ 785.923594] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 [ 785.970005] input: syz0 as /devices/virtual/input/input66 [ 785.974704] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000018 data 0x18 [ 786.000654] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000068 data 0x18 [ 786.053346] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000058 data 0x0 [ 786.089514] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000028 data 0x10 03:34:19 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x202002) keyctl$chown(0x4, r1, 0x0, 0x0) 03:34:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x1000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 786.130742] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000078 data 0x10 [ 786.148898] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000008 data 0x30 [ 786.182250] xt_time: unknown flags 0x4 [ 786.201402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.209336] input: syz0 as /devices/virtual/input/input67 03:34:19 executing program 4: r0 = syz_open_procfs(0x0, 0xffffffffffffffff) openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) [ 786.233798] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000058 data 0x30 [ 786.258265] kvm [5176]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x40000048 data 0x0 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x2000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') sendfile(r0, r0, 0x0, 0xbd) 03:34:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:19 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000002c0)={r6}, 0x8) 03:34:19 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) 03:34:19 executing program 4: socket(0x23, 0x0, 0x10000000000002) 03:34:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="646f733178667e6f7070792c736d61636b6673686174bd76"]) [ 786.452702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 786.475473] input: syz0 as /devices/virtual/input/input68 03:34:19 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x3000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:19 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:20 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) lseek(r2, 0xfffffffffffffffe, 0x1) getdents64(r2, &(0x7f0000000180)=""/166, 0xa6) 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x4000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:20 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x0) [ 786.679249] input: syz0 as /devices/virtual/input/input69 03:34:20 executing program 2: clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0xffffffffffffffff) 03:34:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 786.725224] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:20 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4004510f, 0x71f000) 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x5000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:20 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getresuid(&(0x7f0000000040), &(0x7f0000000080), 0x0) [ 786.816886] binder: 5814:5816 ioctl c018620b ffffffffffffffff returned -14 [ 786.845765] input: syz0 as /devices/virtual/input/input70 03:34:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x6000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:20 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb05a) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg$sock(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 03:34:20 executing program 2: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xc4) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x8000000000000085, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0xee72) sendfile(r5, r6, 0x0, 0x8000fffffffe) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000180)={0x200, "8ad74be21619dbd0b8418083ae7dc73d86681528fa70d44b18ca9526037681ec", 0x1, 0x1}) r7 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x0) sendfile(r3, r7, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 03:34:20 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.068460] input: syz0 as /devices/virtual/input/input71 [ 787.091690] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x8000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:20 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0x0, &(0x7f0000000040)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000006c0)={0x80, 0x5, 0x4, 0x400, 0x0, {0x6, 0x8}, {}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200001, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000200)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_submit(0x0, 0x247, &(0x7f0000000540)) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0xb, 0x12, 0x7d, &(0x7f00000002c0)="cf53df00f2a1b7df1846ab3715d72b964779ccf7939fb68c295ac5648c7a0462ec8883ec4dffaf098faea77fdff44f4df6da4e09967c9016269c5e422ab0cd42dd8c19f70ab16dbc86eb6267d9918aefba6bc28fd7c0c7b715beeeb651e96f0c8d1412f20ddd0eb80351b8f6b2528f5661e1dd8ab090e2a49d5288445d5be17f7dbfd2c9c93c6d0414439eb61ac54798cba3c0704fffe2384dd84e5f61aa156d93c3873922c4d0b377135ef0adcacaf43e71da26894f8acf5e39eb3431b899de3658af01dac1168aea97e063cf61be96a30604f4624d7d7aaab76ac957c12c040b583fd7f201998679b11af5cee7480ab1b7e3a001fcb9ffcbd5e0d6f867984e6f68bdce555a08e255a8bbe926c047dec2b697d97b69bd35a1d8500584eabb1a34f31e106cbf0d9dd6d7262da1717e0c805dfcc927acfa0c0ee38789cc7fd751855eee0263007fbe0a3a34175eb1193441015e112ed1dc90b3c556443089315688ac6fdab0aebb52c98c34a07488bc81da54f9fceec16b14f633c29aa5fec0ad9d331e3de1c1573f43ed5740cf3022415ee1c82a341294356900b0cd8a55b97ad1e06e783f2700402086c8bc7f35fb24f89ef2d1eb59eda2708492db79e86a89e848f495b0b563724713f2544b94c339c07009e8d4faf1c81587fad9fa17ba3062f5d2424cad5e63d29b8a1d9473aba4dec0928eb5ebf90650d9cbf1af9d417357a9b0b3b61abee1d0fe25bb7e849ac23377451d5ffb5c194cfda99d68b4b41c11f5cc97c3d1b4a9cec1e0eba4164a01e1fe258818ece97c12ed860a02c1ddec074a2baa05a26bb3b58dd6681609e6de2bad88b5f8909adc5d26fdd93ad4f4e888210150b3e5b0f5d75ffd6b1b5b2078cf55a3027a673be4ac8ef1c11a79eba80a5d4146fc9ecbfbc39db2a18ff44bb787ec3cb4b971d77ddca22f81f19d72ffce77d9d3dba1cf1b21cc688a5f154474e69370463906de16fe0f3c1aa6ef4188390b90ffaffa12f1f4287b442e083fcb6bc5d2a425925a01c4cf584fb02d1340f89239d22441fe060cb33e149f41b085d4236621412fe6ab3c20fbebc7a9e13f6865f9b452869f7119aec978bb7a917fe432d0390241ea1d1bbb3356741863d11ae2791fdf758547b12c6178fe274a582315e92fe4414b5f61398b38add01b555921d61889b272622e2ce255f14acb8ea4ebea2da6bea136889664cfcfaf575646e97cdd0f0172f0851810239981b3b79e1ffa7dba701b52ce27648156d775546cee650fc1880411bcd3bc923299866c06062769f3f6abd9df4a267f216645d01576ef9fb53930e1b710b98e320ad1b4012c8907a5b83183e078109914906bcd20556e20f5f559a7a233afb1a362701cdd32087fc11a0f0824b6c32043eeb6ddff8a02b3657cd29dee1b10277fd26e7122c1bd6ee5b9776707bd81c96a58bc81"}) fcntl$setstatus(r2, 0x4, 0x3800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffffffd, 0x3, 0x0, 0xfffffffffffffffb}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FMT(r5, 0xc0d05605, &(0x7f0000000000)={0x6, @raw_data="169ef0b580acd26393d8d5c79b4679a0e9fc3442d8bf4a57ceab18568206d8d94b84cee03c507475ef340b6d2991c4c7d60f6771dddf479c61bc63222c20da74bb4280b5ee7c3ea3efb7b0dfd7872738ca2b9ec8a7b25d7955d642f562e97e11e93cd0c2265ba40f2ede01785a09a98d9c1e15a24c856707acb0124576f0bb1ad0955c8a02191a17c66faa2517819723f619bb488a849dac81c412648b62dd9e241c6e808a9694b93ed6df528e1b4ff2627d34b083a0ca90c3bf40742aa0d545165e076523adff86"}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101803, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x24) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f00000000c0)={0x8021, 0x2}) r9 = creat(&(0x7f0000000280)='./file0\x00', 0x1) close(r9) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 03:34:20 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) 03:34:20 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xc074510c, 0x0) 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x9000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 787.325448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 787.333911] input: syz0 as /devices/virtual/input/input72 03:34:20 executing program 3: syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000002c0)="b9800000c00f3235000400000f30260fc7b510000000440f20c03506000000440f22c0f30fc7330f0f21bb660fc7b303000000d11166baf80cb8765dd582ef66bafc0c66edf76e5db92c0a0000b80a000000ba000000000f30", 0x59}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(0xffffffffffffffff, 0xc06c4124, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:20 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xa000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:20 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x4, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffce2, 0x10, &(0x7f0000000000), 0x47d}, 0x48) 03:34:20 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xb000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:21 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635202100000f22c067f3af", 0x3c}], 0x0, 0x0, 0x0, 0x68) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.774154] input: syz0 as /devices/virtual/input/input73 03:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:21 executing program 2: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket(0xa, 0x802, 0x0) socket$inet(0x2, 0x80001, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:34:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xc000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:21 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(r1) 03:34:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:21 executing program 3: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 03:34:21 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xe000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:21 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) memfd_create(&(0x7f0000000380)='\x00\xb3y\xb1\xc4\xd6)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\xf5\xefN\x8d\x8d\x11\xddy\xdd<\xeb\xd9\xa7\x10\xbe\x03\x00E-\x82\xa0}6\xaa', 0x0) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 03:34:21 executing program 4: 03:34:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:22 executing program 4: 03:34:22 executing program 2: 03:34:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:22 executing program 4: 03:34:22 executing program 2: 03:34:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x10000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:22 executing program 4: 03:34:22 executing program 3: 03:34:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:22 executing program 2: 03:34:22 executing program 4: 03:34:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x20000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:22 executing program 2: 03:34:22 executing program 4: 03:34:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x38000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:22 executing program 4: 03:34:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:22 executing program 4: 03:34:22 executing program 3: 03:34:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:22 executing program 2: 03:34:22 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x3f000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:23 executing program 3: 03:34:23 executing program 4: 03:34:23 executing program 2: [ 789.704854] xt_ct_set_helper: 5 callbacks suppressed [ 789.704862] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:23 executing program 2: 03:34:23 executing program 3: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x60000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 4: 03:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:23 executing program 2: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:23 executing program 3: 03:34:23 executing program 2: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 789.929696] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x65580000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 4: [ 790.013414] input: syz0 as /devices/virtual/input/input83 03:34:23 executing program 2: 03:34:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x81000000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 3: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) 03:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:23 executing program 4: 03:34:23 executing program 3: 03:34:23 executing program 2: [ 790.219367] input: syz0 as /devices/virtual/input/input84 03:34:23 executing program 4: 03:34:23 executing program 2: 03:34:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x88a8ffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 3: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, 0x12, 0x0, 0x2}, 0x6a) [ 790.304846] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:23 executing program 4: 03:34:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:23 executing program 2: 03:34:23 executing program 3: [ 790.472781] input: syz0 as /devices/virtual/input/input85 03:34:23 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x9effffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:23 executing program 4: [ 790.527937] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:23 executing program 3: 03:34:23 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, 0x0, 0x0) 03:34:24 executing program 4: 03:34:24 executing program 2: 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xcb040000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:24 executing program 3: 03:34:24 executing program 4: 03:34:24 executing program 2: [ 790.723229] input: syz0 as /devices/virtual/input/input86 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xf0ffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 4: [ 790.789462] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:24 executing program 3: 03:34:24 executing program 2: 03:34:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, 0x0, 0x0) 03:34:24 executing program 4: 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xfcffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:24 executing program 2: 03:34:24 executing program 4: 03:34:24 executing program 3: 03:34:24 executing program 2: [ 791.020178] input: syz0 as /devices/virtual/input/input87 [ 791.053084] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xffffa888]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, 0x0, 0x0) 03:34:24 executing program 4: 03:34:24 executing program 2: 03:34:24 executing program 3: 03:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xfffff000]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 2: [ 791.253229] input: syz0 as /devices/virtual/input/input88 03:34:24 executing program 4: 03:34:24 executing program 3: [ 791.307672] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:24 executing program 2: 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xffffff7f]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x0, 0x0, 0x2}, 0x6a) 03:34:24 executing program 4: 03:34:24 executing program 2: 03:34:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:24 executing program 3: [ 791.495433] input: syz0 as /devices/virtual/input/input89 03:34:24 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xffffff9e]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:24 executing program 4: [ 791.567137] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:25 executing program 3: 03:34:25 executing program 2: 03:34:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x0, 0x0, 0x2}, 0x6a) 03:34:25 executing program 4: 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xfffffff0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:25 executing program 3: 03:34:25 executing program 4: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31d030, 0x0) 03:34:25 executing program 2: [ 791.798676] input: syz0 as /devices/virtual/input/input90 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xfffffffc]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 2: 03:34:25 executing program 3: [ 791.851376] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:25 executing program 4: 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0xffffffff]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x0, 0x0, 0x2}, 0x6a) 03:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:25 executing program 2: 03:34:25 executing program 3: 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 4: [ 792.055168] input: syz0 as /devices/virtual/input/input91 [ 792.092703] xt_CT: You must specify a L4 protocol and not use inversions on it 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x2]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 3: 03:34:25 executing program 2: 03:34:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12}, 0x6a) 03:34:25 executing program 4: 03:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x3]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 2: 03:34:25 executing program 3: 03:34:25 executing program 4: 03:34:25 executing program 2: [ 792.355695] input: syz0 as /devices/virtual/input/input92 03:34:25 executing program 3: 03:34:25 executing program 4: 03:34:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:25 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12}, 0x6a) 03:34:25 executing program 2: 03:34:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x4]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:25 executing program 4: 03:34:25 executing program 3: 03:34:26 executing program 2: [ 792.594422] input: syz0 as /devices/virtual/input/input93 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x5]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:26 executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) write$input_event(r1, &(0x7f00000000c0)={{0x77359400}, 0x12}, 0x6a) 03:34:26 executing program 2: 03:34:26 executing program 3: 03:34:26 executing program 4: 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x6]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 2: 03:34:26 executing program 3: [ 792.822940] input: syz0 as /devices/virtual/input/input94 03:34:26 executing program 4: 03:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:26 executing program 2: 03:34:26 executing program 3: 03:34:26 executing program 0: 03:34:26 executing program 4: 03:34:26 executing program 2: 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 3: 03:34:26 executing program 4: 03:34:26 executing program 0: 03:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:26 executing program 2: 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x9]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 4: 03:34:26 executing program 3: 03:34:26 executing program 2: 03:34:26 executing program 0: 03:34:26 executing program 3: 03:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xa]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 4: 03:34:26 executing program 2: 03:34:26 executing program 0: 03:34:26 executing program 4: 03:34:26 executing program 0: 03:34:26 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:26 executing program 2: 03:34:26 executing program 3: 03:34:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:26 executing program 4: 03:34:27 executing program 2: 03:34:27 executing program 3: 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xc]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 0: 03:34:27 executing program 4: 03:34:27 executing program 2: 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xe]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000340)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x104, 0x2000000000011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 03:34:27 executing program 0: r0 = socket(0x2, 0x803, 0x40) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14}}], 0x18}}], 0x1, 0x0) 03:34:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000002c0)) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0xddf5) 03:34:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:27 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) mlock(&(0x7f000084b000/0x4000)=nil, 0x4000) 03:34:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='F', 0x18000, 0x20000013, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000ffeffffe) 03:34:27 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x0, r4, 0x0}]) 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xf]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x10]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 794.039102] selinux_nlmsg_perm: 24 callbacks suppressed [ 794.039524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=9257 comm=syz-executor.4 03:34:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x38]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x5453, 0x0) 03:34:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x60]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000002c0)) r2 = socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0xddf5) 03:34:27 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0xf0]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:27 executing program 2: clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f00000008c0)={'filter\x00', 0xc001, 0x4, 0x3e0, 0x1e8, 0x1e8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev, @empty, @multicast1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x430) [ 794.433385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pig=9606 comm=syz-executor.4 [ 794.532067] kasan: CONFIG_KASAN_INLINE enabled [ 794.553611] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 794.562203] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 794.568472] CPU: 0 PID: 9715 Comm: syz-executor.2 Not tainted 4.19.96-syzkaller #0 [ 794.576189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.585677] RIP: 0010:xt_rateest_put+0xa1/0x440 [ 794.590366] Code: 65 6f 61 fb 45 84 f6 0f 84 ab 02 00 00 e8 17 6e 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 67 03 00 00 4d 8b b5 48 1b 00 00 e8 d9 7e 4e fb [ 794.609905] RSP: 0018:ffff888032fe7988 EFLAGS: 00010206 [ 794.615306] RAX: dffffc0000000000 RBX: ffff888089982500 RCX: ffffc9000a2b8000 [ 794.622564] RDX: 0000000000000369 RSI: ffffffff8609a7a9 RDI: 0000000000001b48 [ 794.629830] RBP: ffff888032fe79b8 R08: ffff8880986ba6c0 R09: ffffed1015d04733 [ 794.637083] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 000000000000002c [ 794.644375] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8609ab60 [ 794.651640] FS: 00007fce39898700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 794.660457] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.666335] CR2: 0000000000625208 CR3: 000000008182e000 CR4: 00000000001406f0 [ 794.673595] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 794.680846] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 794.688108] Call Trace: [ 794.690689] ? xt_rateest_put+0x440/0x440 [ 794.694823] xt_rateest_tg_destroy+0x72/0xa0 [ 794.699216] ? xt_percpu_counter_free+0x8f/0xd0 [ 794.703869] translate_table+0x11f4/0x1d80 [ 794.708106] ? arpt_alloc_initial_table+0x690/0x690 [ 794.714073] ? lock_downgrade+0x880/0x880 [ 794.718212] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 794.723732] ? _copy_from_user+0xdd/0x150 [ 794.727880] do_arpt_set_ctl+0x30a/0x640 [ 794.731939] ? compat_do_arpt_get_ctl+0x850/0x850 [ 794.736942] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 794.741773] ? wait_for_completion+0x440/0x440 [ 794.746348] ? mutex_unlock+0xd/0x10 [ 794.750069] ? nf_sockopt_find.constprop.0+0x226/0x290 [ 794.755334] nf_setsockopt+0x77/0xd0 [ 794.759044] ip_setsockopt+0xdf/0x100 [ 794.762835] udp_setsockopt+0x68/0xb0 [ 794.766624] sock_common_setsockopt+0x94/0xd0 [ 794.771107] __sys_setsockopt+0x17a/0x280 [ 794.776285] ? kernel_accept+0x310/0x310 [ 794.780334] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 794.785087] ? do_syscall_64+0x26/0x620 [ 794.789063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 794.794416] ? do_syscall_64+0x26/0x620 [ 794.798378] __x64_sys_setsockopt+0xbe/0x150 03:34:28 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000001600)={[{@nodots='nodots'}]}) 03:34:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 03:34:28 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10, 0x0, r4, 0x0}]) 03:34:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x300]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) write$cgroup_int(r0, &(0x7f0000000240), 0x12) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x108a00}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x49c8586097ce370b, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf4f}]}, 0x20}}, 0x0) [ 794.802776] do_syscall_64+0xfd/0x620 [ 794.806578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 794.811762] RIP: 0033:0x45aff9 [ 794.814947] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.833849] RSP: 002b:00007fce39897c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 794.841573] RAX: ffffffffffffffda RBX: 00007fce398986d4 RCX: 000000000045aff9 [ 794.848849] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000003 [ 794.856127] RBP: 000000000075bf20 R08: 0000000000000430 R09: 0000000000000000 [ 794.863401] R10: 00000000200008c0 R11: 0000000000000246 R12: 00000000ffffffff [ 794.870677] R13: 00000000000009b5 R14: 00000000004d3770 R15: 000000000075bf2c [ 794.877958] Modules linked in: [ 794.895714] ---[ end trace ea505cc93df3f351 ]--- 03:34:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x4cb]}]}, {0x4}}}}]}, 0x470}}, 0x0) 03:34:28 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000001600)={[{@nodots='nodots'}]}) [ 794.905286] RIP: 0010:xt_rateest_put+0xa1/0x440 [ 794.917387] xt_ct_set_helper: 10 callbacks suppressed [ 794.917393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 794.935441] Code: 65 6f 61 fb 45 84 f6 0f 84 ab 02 00 00 e8 17 6e 61 fb 49 8d bd 48 1b 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 67 03 00 00 4d 8b b5 48 1b 00 00 e8 d9 7e 4e fb 03:34:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x20}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) write$cgroup_int(r0, &(0x7f0000000240), 0x12) creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x80020) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x108a00}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x49c8586097ce370b, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf4f}]}, 0x20}}, 0x0) 03:34:28 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8697071") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x470, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x45c, 0x1, @m_police={0x458, 0x1, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x444, 0x2, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xedee}}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0x0, 0x0, 0x500]}]}, {0x4}}}}]}, 0x470}}, 0x0) [ 794.961249] RSP: 0018:ffff888032fe7988 EFLAGS: 00010206 [ 794.966879] RAX: dffffc0000000000 RBX: ffff888089982500 RCX: ffffc9000a2b8000 [ 794.981304] RDX: 0000000000000369 RSI: ffffffff8609a7a9 RDI: 0000000000001b48 [ 794.993505] RBP: ffff888032fe79b8 R08: ffff8880986ba6c0 R09: ffffed1015d04733 03:34:28 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10, 0x0, r4, 0x0}]) 03:34:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x158, 0x0, 0x158, 0x0, 0x0, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@limit={{0x48, 'limit\x00'}, {0x0, 0x1}}, @common=@unspec=@time={{0x38, 'time\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) [ 795.019318] R10: ffffed1015d04732 R11: ffff8880ae823993 R12: 000000000000002c [ 795.035953] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8609ab60 [ 795.043977] FS: 00007fce39898700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 795.061030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.082535] CR2: 00007ffd850ace98 CR3: 000000008182e000 CR4: 00000000001406f0 [ 795.094292] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 795.106063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 795.108062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 795.114190] Kernel panic - not syncing: Fatal exception [ 795.126818] Kernel Offset: disabled [ 795.130475] Rebooting in 86400 seconds..