00000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xe902000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x43) [ 1440.163280][T19326] xt_policy: too many policy elements 19:57:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000005000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1440.335604][T19334] xt_policy: too many policy elements 19:57:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 19:57:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x44) 19:57:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000006000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xc00c) 19:57:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000007000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x45) [ 1441.188037][T19441] xt_policy: too many policy elements 19:57:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 19:57:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x46) [ 1441.381234][T19457] xt_policy: too many policy elements 19:57:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000228000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x47) [ 1441.622230][T19468] xt_policy: too many policy elements 19:57:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x6, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 19:57:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000003f000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x48) 19:57:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xd00c) [ 1442.494358][T19582] xt_policy: too many policy elements 19:57:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x49) 19:57:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}]}, 0x78) 19:57:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000040000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000090000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1442.739398][T19600] xt_policy: too many policy elements 19:57:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4a) [ 1442.894101][T19606] xt_policy: too many policy elements 19:57:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x7, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 19:57:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000002c0000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4b) 19:57:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xe00c) 19:57:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000003d0000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4c) 19:57:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 19:57:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000003e6000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4d) 19:57:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) [ 1444.118351][T19738] policy_mt_check: 2 callbacks suppressed [ 1444.118359][T19738] xt_policy: too many policy elements 19:57:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000003e8000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4e) 19:57:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 19:57:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xf00c) 19:57:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4f) 19:57:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1445.062813][T19859] xt_policy: too many policy elements 19:57:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}]}, 0x78) 19:57:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000ec000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x50) 19:57:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}]}, 0x78) [ 1445.293945][T19872] xt_policy: too many policy elements 19:57:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000003f0000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000}]}, 0x78) 19:57:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x51) 19:57:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000ff000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1445.501999][T19880] xt_policy: too many policy elements [ 1445.713736][T19887] xt_policy: too many policy elements 19:57:18 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x14, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 19:57:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x52) 19:57:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000040000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x2000fdef) [ 1446.463530][T20001] xt_policy: too many policy elements 19:57:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000}]}, 0x78) 19:57:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000100000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x53) 19:57:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) [ 1446.693230][T20015] xt_policy: too many policy elements 19:57:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x54) 19:57:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x90, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000200000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 19:57:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x55) 19:57:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfffffdef) 19:57:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x56) 19:57:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) [ 1447.687503][T20139] xt_policy: too many policy elements 19:57:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x57) 19:57:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000400000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1447.873686][T20153] xt_policy: too many policy elements 19:57:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}]}, 0x78) [ 1448.014655][T20158] xt_policy: too many policy elements 19:57:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x300, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x58) 19:57:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700000000000000}]}, 0x78) 19:57:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000500000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfffffffffffffdef) 19:57:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x59) 19:57:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000600000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}]}, 0x78) 19:57:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1449.170372][T20287] policy_mt_check: 1 callbacks suppressed [ 1449.170380][T20287] xt_policy: too many policy elements 19:57:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000700000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5a) [ 1449.310076][T20293] xt_policy: too many policy elements 19:57:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x600, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100000000000000}]}, 0x78) 19:57:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000022800000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5b) 19:57:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1450.242715][T20406] xt_policy: too many policy elements 19:57:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5c) 19:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000}]}, 0x78) 19:57:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000003f00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1450.418902][T20416] xt_policy: too many policy elements 19:57:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000004000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5d) 19:57:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) [ 1450.623339][T20426] xt_policy: too many policy elements 19:57:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x700, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5e) 19:57:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000009000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 19:57:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1451.834009][T20442] xt_policy: too many policy elements 19:57:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5f) 19:57:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000002c000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) [ 1452.091002][T20451] xt_policy: too many policy elements 19:57:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003d000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x60) 19:57:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc208000000000000}]}, 0x78) [ 1452.285083][T20459] xt_policy: too many policy elements 19:57:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x1400, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003e600000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000}]}, 0x78) 19:57:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x61) 19:57:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x62) 19:57:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1453.242476][T20472] xt_policy: too many policy elements 19:57:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003e800000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) [ 1453.470143][T20485] xt_policy: too many policy elements 19:57:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x63) 19:57:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 19:57:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000ec00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x3f00, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x64) 19:57:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003f000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 19:57:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1454.728942][T20506] policy_mt_check: 1 callbacks suppressed [ 1454.728950][T20506] xt_policy: too many policy elements 19:57:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x65) 19:57:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000ff00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 19:57:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1454.962881][T20516] xt_policy: too many policy elements 19:57:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x66) 19:57:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000400000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) [ 1455.195885][T20527] xt_policy: too many policy elements 19:57:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x9000, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x67) 19:57:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000001000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 19:57:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x13}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x6a282, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r2 = semget$private(0x0, 0x1, 0x20) semctl$GETNCNT(r2, 0x4, 0xe, &(0x7f0000000380)=""/30) r3 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x42) ioctl$KVM_SMI(r3, 0xaeb7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x0, 0x6) write$tun(r6, &(0x7f0000000180)={@void, @void, @mpls={[{0x2, 0x0, 0x1}, {0x81}, {0x9000}, {0x8000}, {0xa5, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@tcp={{0x21, 0x4, 0x3, 0x7, 0x1c9, 0x66, 0x0, 0x9, 0x6, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0xad, 0x3, 0x5, [{@remote, 0xf55}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfa3d}, {@empty, 0x3f}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x18, 0x36, 0x0, 0x2, [0x9, 0x70, 0x9, 0x3, 0xc7]}, @ssrr={0x89, 0x27, 0x99, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x40, @rand_addr=0x7]}, @end]}}, {{0x4e21, 0x4e20, r7, r8, 0x0, 0x0, 0x13, 0x2, 0x800, 0x0, 0x5, {[@generic={0x0, 0x9, "019f55bb947889"}, @window={0x3, 0x3, 0x6}, @fastopen={0x22, 0x8, "0bb1b42550e4"}, @sack={0x5, 0x22, [0x1, 0x5, 0x6, 0x6, 0x6, 0x8000, 0x2, 0xfb]}]}}, {"11cd4fc6e9ff5b2daf887a45129dd9629a94e7e2274cbd387bb3316c6d411d4639711f3251375e9bc3e844b4dcfb45ebf67f8ed974cb1fac519c18e7cad484407f7a579b7532917908a7e7203bc2fe5150e1641f538e1b58e44f2645bdf8994d5ab77523c28f349922c6cfac4b77324257713d41db13be330f659f8e8922eda15dbbe6c36f139a2971c8379352544262a5cbc34f4c6a03d47fa6983e591272df933e065a46eb9499605338532caa23f723021c26fcb76f931078ee0cefdf1fc3b76f33daa23cdbf210bfefe6943448a12503ff25c51218c9a93fa86bfca7503ddac4998ae655ea6ae886627a10f13fe9a8b4a50c2ad181bdcf"}}}}}, 0x1e1) 19:57:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x68) [ 1456.138433][T20544] xt_policy: too many policy elements 19:57:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000002000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 19:57:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x14}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x69) [ 1456.382043][T20558] xt_policy: too many policy elements 19:57:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1456.581250][T20565] xt_policy: too many policy elements 19:57:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0xffff, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 19:57:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6a) 19:57:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000004000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x18}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f00000000c0)={0xfe00, [0x0, 0x200, 0x80, 0x9, 0xfff8, 0x9, 0x9000, 0x8, 0x5, 0xfff, 0x987, 0x81, 0x3, 0xd7, 0xe880, 0x5, 0x9, 0x7f, 0x9, 0x2, 0x4, 0xec, 0x3, 0x3, 0x0, 0x4, 0x9, 0x100, 0x2, 0xffff, 0x9, 0x8, 0x9, 0x7, 0x8000, 0x2, 0x3f, 0x5, 0x1, 0x100, 0x4314, 0x0, 0x6376, 0x65, 0x3, 0x7, 0x6, 0x81], 0xb}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3}, @eth={@dev={[], 0x42}, @random="03e181754bc6", @val={@val={0x9100, 0x7, 0x0, 0x40}, {0x8100, 0x5, 0x0, 0x1}}, {@llc={0x4, {@llc={0x0, 0xe, "dc", "946eafc6b79462c36e30263ddf953e40e3919dcaa6e7c05ca69f564cb352648d4bf0010c7ef5af8f67e420fd4bad84c848c84e056713d51af0aafa2a936e7cbed66d213e1cfe05c6735a8c6514328509836e60ed7eb242126059b7132375d60f572bef2ca6b2e217996c32"}}}}}}, 0x8e) [ 1457.255145][T20672] xt_policy: too many policy elements 19:57:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6b) 19:57:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000005000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 19:57:29 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6c) [ 1457.457344][T20693] xt_policy: too many policy elements 19:57:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000006000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1457.595160][T20701] xt_policy: too many policy elements 19:57:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000007000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x78) 19:57:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6d) 19:57:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0x0, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={r4, 0xf5, 0x6f}, &(0x7f0000000180)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-sse2\x00'}}, &(0x7f0000000200)="de4e4364e13a7f46f73976591617a5c11c02301859dae669d57c4f69582d89155cbcb5b98f6fcc714d447dd8f64a5f4ab706590c96081d8470db33b61395324027a8411ed0de7560248d19dde28358ccda106d1d02fede5e05043d44614d0a15f227fde7a89e9decca39cdc03fa178b85c60fde60df0756ad3311d8f54d27908101eb23f374bb3ee00de592c19685534c10108ef1c0616db76fbf97a4707d244babadf1e524709da99fd57d58502a2090902e995577c61d81ae5a9c3ab8596c1d2565cc4666e832692681beee9c3d88ed3a187217aa5622866665144f4deb092e808753e3c35bb72f1f38d30383dd20541078e1934", &(0x7f0000000300)=""/111) 19:57:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6e) [ 1458.445876][T20813] xt_policy: too many policy elements 19:57:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000228000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x180}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 19:57:30 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6f) 19:57:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000003f000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 19:57:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x70) 19:57:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000040000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x2e9}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x80, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='ipvlan0\x00', 0x5, 0x5, 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x7, [@var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0xc, 0x0, 0x0, 0xc, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x7c, 0x0, 0x78, 0x4}, @struct={0x3, 0x4, 0x0, 0x4, 0x1, 0x40, [{0x8, 0x3, 0xa7e2}, {0x4, 0x4, 0x5}, {0x8, 0x0, 0x401}, {0x10, 0x3, 0x8001}]}, @ptr={0x1, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x61, 0x5f, 0x61, 0x30]}}, &(0x7f0000000000)=""/54, 0x93, 0x36, 0x1}, 0x20) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000000000000000450000020000000000000078ac141400ac1414bb11009078040000004500000400e0000002ffffffff4717e261e63846f4d50000000000000053eb550da7312e0a357169b8e7356adb44741981a6888712564fae61703ec079a86cd1606bf320a5e7"], 0x1) 19:57:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000090000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x71) 19:57:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 19:57:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000002c0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:31 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x72) [ 1459.863981][T20972] policy_mt_check: 4 callbacks suppressed [ 1459.863989][T20972] xt_policy: too many policy elements 19:57:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 19:57:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003d0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x73) 19:57:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x420000015002}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x6) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000780)=0xe8) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240108c1}, 0x40000) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000450010300000000000029078ac141400ac1414bb1100907804020000450000040000000000000000e0000002ffffffff"], 0xfdef) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x292001, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000100)="62436a3b6633a47a4576defd2526a3ed", 0x10) [ 1460.790585][T21087] xt_policy: too many policy elements 19:57:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003e6000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:32 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x74) 19:57:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15}]}, 0x78) 19:57:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x75) [ 1460.999111][T21200] xt_policy: too many policy elements 19:57:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003e8000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1461.183082][T21209] xt_policy: too many policy elements 19:57:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}]}, 0x78) 19:57:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x76) 19:57:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000ec000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000180)={0x1, 0xf000, 0x3f, 0x4, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000200)) r8 = accept$packet(r1, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000100)={0x1000, 0x15b4, 0x80000001, 0x1000, 0x3}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x700}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1461.827402][T21222] xt_policy: too many policy elements 19:57:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}]}, 0x78) 19:57:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003f0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x77) 19:57:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000ff000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) [ 1462.059582][T21243] xt_policy: too many policy elements [ 1462.184108][T21247] xt_policy: too many policy elements 19:57:35 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:35 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x20000078) 19:57:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000002000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}]}, 0x78) 19:57:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:35 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0x7, 0xa7) syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0307945b944a6542af0100000000000000000000004500ac44ea1f7649ac00300000000001029078ac141400ac1414bb11002678040000004500"], 0xfdef) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '\x00'}, &(0x7f0000000240)='fou\x00', 0x4, 0x1) [ 1463.162412][T21357] xt_policy: too many policy elements 19:57:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000003000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 19:57:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000004000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1463.374668][T21371] xt_policy: too many policy elements 19:57:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000005000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1463.515276][T21378] xt_policy: too many policy elements 19:57:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000006000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x7, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000007000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 19:57:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000000)="1adce90711120d9d3fa3e0a8621d211a8373c809875e2520f06c41dedb3b680cc9ed732d56c28418cf966e134f9ba83059d855e702f053ebe487bcb1cf79a6e24913d44778ed347008df9e7b746ebd2bc1b2dc6887c446a69f4969cd7439168da2eba801bd571b4838a1cf53b67b8237346ae443bd5c82ca788d6113771b3fcf31a3eb773aee0b4ccc89dc4e835c4f3f125ab18197dd7f694dfb4424712463495c231e4c23a9cc744a3a7e7bfee921df84e227a044708e323a9259e9262ce39a49409658b8e6627f3b2a4304779ac46182b895dba74e6824e2edf56a85af52256e9b275ea33da1e6a48a37ffb38a05335326d9bade035bf9") ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xf2a) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb0) 19:57:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000180)={0x140, 0x78, 0x2000, 0x10, 0x5, 0x5, 0x18, 0x1, {0xf, 0x100}, {0xaee, 0x4, 0xf849}, {0x1ea, 0xf4}, {0x5, 0x5, 0x1}, 0x0, 0x40, 0x80, 0x3, 0x1, 0x81, 0x10001, 0x3, 0x7, 0x1f, 0x7, 0x2, 0x11, 0x1, 0x2, 0x9}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5a) 19:57:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}]}, 0x78) 19:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000090000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000ec000000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27}]}, 0x78) 19:57:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000028020000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}]}, 0x78) [ 1464.958048][T21514] policy_mt_check: 5 callbacks suppressed [ 1464.958056][T21514] xt_policy: too many policy elements 19:57:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x8, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000c0020000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}]}, 0x78) 19:57:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:37 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x4d1080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000080)=0x8000) 19:57:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) 19:57:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b5b083b31000027000000000000000000000000000000006d100000ddff0000400000000000000000000000000000000000000000000000000056411925e980442a43fb9c7f03cb0d5ca1ec4b29689b5071379883655b008bee4c83a35bef13fa5884ab8b4706dbdf7d9a9ea100a90224be6889"], 0x74) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000000)=""/46) 19:57:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]}, 0x78) [ 1465.952248][T21629] xt_policy: too many policy elements 19:57:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1100}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000d0030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000e6030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1466.170986][T21643] xt_policy: too many policy elements [ 1466.263219][T21648] xt_policy: too many policy elements [ 1466.365285][T21650] xt_policy: too many policy elements 19:57:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x14, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}]}, 0x78) 19:57:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000e8030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1200}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:39 executing program 4: getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000100)=""/41, 0x29) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2, 0x38, 0x1}, [{0x3, 0x9, 0x0, 0x4, 0x6, 0x101, 0x2, 0x3d}]}, 0x78) 19:57:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'hsr0\x00', 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @void, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x30) 19:57:39 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x14b280, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x0, 0x143, 0x40}, [{}]}, 0x78) 19:57:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1467.277149][T21763] xt_policy: too many policy elements 19:57:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 19:57:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000f0030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000050000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1467.529014][T21879] xt_policy: too many policy elements 19:57:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) [ 1467.694257][T21883] xt_policy: too many policy elements 19:57:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x90, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @void, @mpls={[], @ipv4=@igmp={{0x17, 0x4, 0x1, 0x5, 0xb5, 0x68, 0x0, 0x61, 0x2, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}, {[@ssrr={0x89, 0x2b, 0xf3, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty, @rand_addr=0x101, @local, @multicast2, @empty, @multicast2]}, @timestamp={0x44, 0xc, 0xf5, 0x0, 0xd, [0x2, 0x100]}, @rr={0x7, 0xf, 0x54, [@remote, @local, @multicast2]}]}}, {0x13, 0x2, 0x0, @empty, "1e1f75427f79b521ce5356c305bf77e7730f044919c2611100b9be6c4874fa721fbc38212eecfb7a85cbde1fa38502611a02ea563934efc30b851467ceb54d6b4af66bd93b9aeb85f61a3c67138f364b6d"}}}}, 0xb5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80984120, &(0x7f0000000240)) 19:57:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000060000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78) 19:57:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1400}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x2) arch_prctl$ARCH_GET_CPUID(0x1011) [ 1468.407378][T21897] xt_policy: too many policy elements 19:57:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 19:57:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1800}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000070000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) write$fb(r1, &(0x7f00000000c0)="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", 0x1000) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) 19:57:40 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000d94559afc32cf1f700000000000000003800"/120], 0x78) [ 1468.673905][T21916] xt_policy: too many policy elements 19:57:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xff, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000002280000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 19:57:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000080)) 19:57:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0xe5, 0x2) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344}, 0x5, 0x2c) write$tun(r0, &(0x7f0000000380)={@void, @val={0x3}, @mpls={[], @ipv4=@tcp={{0xe, 0x4, 0x2, 0x33, 0x103, 0x66, 0x0, 0x79, 0x6, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x24, 0x85, 0x0, 0x0, [0x3ad, 0x20, 0xffff, 0x200, 0xe5, 0x2, 0x8, 0x7]}]}}, {{0x4e21, 0x4e23, r3, r2, 0x0, 0x0, 0x6, 0x2, 0x9, 0x0, 0x5, {[@nop]}}, {"370d28c923b68a4510ce4f588669e79f3b0a1a775ba9dffcc7caa0b6a090dfe2cf907307ecfe34db91c5ef1bb6c34d9b35718dfab075ca9753f6d0f207a1989837a4146845d4bdcc7acc22d063c0c01b67a56c511dcfc51cb6cf5c801be1b763491b05942fec16fd5831171ff51ce52892b5400fdb9db741cd00b103ead22ef5a9653a9bc4307da9a98b6b2ba6c7dfb19d5d397ae31497e6549fe312d6f9e9c74ccbdb259409125d3a079616dd882b7c0ccfde"}}}}}, 0x10d) 19:57:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c2}]}, 0x78) 19:57:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000003f0000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:41 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000080)={0x9, 0x5, 0x4, 0x20, 0x9, {0x77359400}, {0x4, 0xc, 0x0, 0x0, 0x2, 0x2, "1c026274"}, 0xffff, 0x3, @offset=0x20, 0x40, 0x0, r0}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000100)) 19:57:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) [ 1470.181052][T22055] policy_mt_check: 1 callbacks suppressed [ 1470.181060][T22055] xt_policy: too many policy elements 19:57:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe902}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000400000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:42 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0xfffffffe}, [{}]}, 0x78) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) fallocate(r1, 0x5b, 0x6, 0x81) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5f, 0x7, 0x3f, 0x9, 0x0, 0x2, 0x3e, 0x9, 0x268, 0x40, 0x199, 0x1, 0x7, 0x38, 0x2, 0x3, 0x40, 0x4}, [{0x5, 0x1, 0x80000001, 0x40, 0x6, 0x3, 0x8001, 0xbc}], "506dce6ab96ddb753c8f408794aec5a6dad7542ed1a87b5d74e9e06c25975c8ec050723dcc2d6feb92350ed8e9b9bb1b383f8702dfba1c6b7a9f150c710ee2b875fd4692ff8b275cb3144920860e78760ecb0fe0afc04f2df29d686f3fb35e52c6763f15b9483d4538d6461464970791098b740d361d0fd68eca2cdc17fac3f6d899b16b0890a3ba79ae991bbbec6230e59d18d7aa97480d65df990b72f1e48d4b7c047fed23c2cacd47e9e235", [[], [], [], [], [], []]}, 0x725) 19:57:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 19:57:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x5a282, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) socket$caif_stream(0x25, 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x2, 0xfffff001, 0x1, 0x81}, 0x1, 0x5, 0x5}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300001c00ac1414bbf00090780400800045000024000000eeffffe1ffd1250002ffffffff0ebe5d1d9fc09d165bab8eb50f9270077fae95b9d7d8449cfda903e123e1206bfae2a979f1b262d9247653e99c659c69b024a87517ace9ad668319af1c53cee65fa66bc25732ba9e5b07214cb470e2b199871d629d86be1b33abc80b74e82de7efa7d9ce2b14"], 0xfdef) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000380)={0x5, 0x7fffffff, 0x1d, &(0x7f0000000340)="3e417fcfa785ce37eaaaa853e713ae388380dea1d07868f5c8d35ffeb5"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = accept4$tipc(r9, &(0x7f0000000000)=@id, &(0x7f0000000300)=0x10, 0x800) fsync(r10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r11, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$bt_BT_CHANNEL_POLICY(r13, 0x112, 0xa, &(0x7f0000000180)=0xfffffff9, &(0x7f0000000200)=0x4) [ 1470.978894][T22175] xt_policy: too many policy elements 19:57:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000900000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}]}, 0x78) 19:57:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000002c00000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1471.213480][T22288] xt_policy: too many policy elements 19:57:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) [ 1471.341412][T22293] xt_policy: too many policy elements 19:57:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000003d00000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1471.467165][T22297] xt_policy: too many policy elements 19:57:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 19:57:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000003e60000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:44 executing program 4: ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000100)={{0x0, 0x0, @identifier="7ac18e04cde9ace0f97d2c559012b20c"}}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000006d1000000000b7214000000000000000000000000000380000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffff000000000000000000"], 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000080)}, 0x10) r0 = socket$inet(0x2, 0x3, 0xa0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@nl=@proc, &(0x7f00000002c0)=0x80, 0x80000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) ioctl$void(r0, 0x5450) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x8, 0x8, 0x4, 0x400000, 0xfff, {}, {0x3, 0x8, 0x8, 0x1, 0x9, 0x5, '$nt3'}, 0x4b, 0x0, @userptr=0x2d, 0x54d480c2, 0x0, r0}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000200)) 19:57:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000000c0)) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) [ 1472.112016][T22318] xt_policy: too many policy elements 19:57:44 executing program 4: lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x6, 0x80000001}, {0x292b, 0x8}]}, 0x14, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000003e80000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 19:57:44 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)) [ 1472.369689][T22431] xt_policy: too many policy elements 19:57:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000ec0000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500}]}, 0x78) 19:57:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000000c0)={0xfffff8f8, 0x6, 0x4, 0x100, 0xa2f, {r4, r5/1000+30000}, {0x5, 0xc, 0x4, 0xff, 0x3, 0xcb, "e875e5ac"}, 0x8, 0x2, @offset=0x9, 0x3, 0x0, r6}) syz_open_pts(r7, 0x20002) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d1000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000200"/120], 0x78) 19:57:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x30040004}, 0x80) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1473.228430][T22448] xt_policy: too many policy elements 19:57:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000003f00000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600}]}, 0x78) 19:57:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pidfd_send_signal(r3, 0x16, &(0x7f0000000080)={0x22, 0x3}, 0x0) [ 1473.426540][T22461] xt_policy: too many policy elements 19:57:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000ff0000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700}]}, 0x78) [ 1473.555339][T22472] xt_policy: too many policy elements 19:57:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000400000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 19:57:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vsock\x00', 0x4000, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000007c0)={r5, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000880)=0x84) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}]}, 0x78) 19:57:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1f) 19:57:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900}]}, 0x78) 19:57:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000001000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x800, 0x1f) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r4}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@rand_addr="c5119cddf307391368b3641fc8b328b3", @rand_addr="acd5bdb5a2e393baa7b8079566ca5c02", @loopback, 0x5, 0x0, 0xa02d, 0x400, 0x5, 0x1040088, r4}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31fe0030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000002003800fdff0000000000000000008effffffffffffff00"/120], 0x78) 19:57:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 19:57:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 19:57:47 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x800) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="586bf1f30db0dcbc6cc626d562f2a395", 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x400, 0x106d, 0x40, 0x4, 0x80000000, 0x0, 0x38, 0x2, 0x0, 0x8}, [{0x0, 0x0, 0x0, 0x8}]}, 0x78) 19:57:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030001000000ffffffff450000300000000000029078ac141400ac1414bb1100907804000000450000040000000000000000e0000002ffffffff"], 0xfdef) [ 1475.825922][T22728] policy_mt_check: 3 callbacks suppressed [ 1475.825931][T22728] xt_policy: too many policy elements 19:57:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4000041) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78) 19:57:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}]}, 0x78) [ 1475.867815][T22733] skbuff: bad partial csum: csum=65535/65535 headroom=64 headlen=64997 19:57:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000004000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2600}]}, 0x78) 19:57:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000005000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1476.111069][T22750] xt_policy: too many policy elements [ 1476.253539][T22757] xt_policy: too many policy elements 19:57:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x7, 0x30, 0x0, 0x0, 0x0, 0x7, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}]}, 0x78) 19:57:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000006000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700}]}, 0x78) 19:57:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x7000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x2c, 0x5, 0x3f, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x1000, "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"}, &(0x7f0000000100)=0x1024) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000450000300000000000029078ac141400ac1414bb1100907804000000f9ffffff0000000000000000e0000002ffffffff"], 0xfdef) 19:57:49 executing program 4: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x247}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000804}, 0x20004050) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}]}, 0x78) [ 1477.183704][T22871] xt_policy: too many policy elements 19:57:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000007000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x402c00, 0x0) ioctl$TIOCSSERIAL(r1, 0x541e, &(0x7f0000000180)={0x81, 0x101, 0xffff, 0xdb, 0x20, 0x3f, 0xfffff000, 0x6, 0x1, 0xff, 0x4, 0xfff, 0xf1c, 0x1, &(0x7f00000000c0)=""/169, 0x2, 0x8, 0x4}) 19:57:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000228000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1477.370008][T22885] xt_policy: too many policy elements 19:57:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100}]}, 0x78) [ 1477.570248][T22893] xt_policy: too many policy elements 19:57:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xa, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) pipe(&(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 19:57:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000003f000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00}]}, 0x78) 19:57:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x4, 0x8, 0x301, 0x0, 0x0, {0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x48}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10403, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x13c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9d}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x502ad659}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2000000}, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r2, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000e00203010800000000080000027f9005001f9caf008efa1181a67e120000000000000000001408080540000000030880044000000021"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24008814) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000040000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1478.415140][T23005] xt_policy: too many policy elements 19:57:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000090000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1478.499501][T23011] xt_policy: too many policy elements 19:57:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 19:57:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78) [ 1478.682227][T23024] xt_policy: too many policy elements 19:57:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00}]}, 0x78) 19:57:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x10, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000002c0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000001fbb000000006d100000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000726a00"/120], 0x78) 19:57:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc208}]}, 0x78) 19:57:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000000045002d4cd5a4f90014f80000069078ac14147b6dbe4cbb1100907804000000450000040000000000000000e0000002ff"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0xb6b) 19:57:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003d0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1479.657976][T23140] xt_policy: too many policy elements 19:57:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 19:57:51 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003e6000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:52 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0xc8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="3388bf475b82fe374eca35ccdb185172"}, {0x14, 0x4, @ipv4={[], [], @broadcast}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr="7706290867a422d096ad9c14fea1cab5"}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x10001}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4004000}, 0x20048081) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 19:57:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003e8000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d100000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000300"/120], 0x78) 19:57:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @bt={0x8, 0x1, 0x81, 0xf8f3, 0x200, 0x1f, 0x8, 0x2}}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) [ 1480.974837][T23275] policy_mt_check: 2 callbacks suppressed [ 1480.974846][T23275] xt_policy: too many policy elements 19:57:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}]}, 0x78) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x1000, 0xa, 0x4, 0x40000020, 0xf7f9, {r1, r2/1000+10000}, {0x5, 0x0, 0x9, 0x6, 0x8, 0x5, "4f46f60f"}, 0x87b, 0x4, @userptr=0x8, 0x9b, 0x0, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r3, 0x7006) 19:57:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000ec000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 19:57:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x0, 0x97, &(0x7f00000000c0)="886449dcc7fd1b9735645a92dc744a5a035035a49978f78a4e0147c766fbf86109a69121bcc70e53e946e9390c6c923e287066c4d76ac19d30f30d5de7ee44a55a006525308283cd2a0096265d95b81606764a6d68cb6ca104964554f1bc44cd7429ecdd93d7afd4ec2380b28e319c59ee801c247a464ef527952b180883d97b6d76b9149701110b275103128c8d3886fb0c8443683bb2"}) [ 1481.283472][T23296] xt_policy: too many policy elements 19:57:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x13, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 19:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003f0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="040029bd7000fbdbdf250200000008000400ac1414bb08000400ac1414bb08000700", @ANYRES32, @ANYBLOB="08000400ac14142008000500e000000108000700", @ANYRES32=r10, @ANYBLOB="00c81c9514c91e09688df6b061a200020000000000a5f1becd3c1d9e6823b7052d3e0116bc6e8f405fccc11b6246d9e155c4879bafa09c22f3849b7d4ccf878de5533ea47995934400ae9896c36111f70846d149ef"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 19:57:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="09005c27fa22d0ceeab473fe090000"]) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)) 19:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000ff000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1482.023649][T23414] xt_policy: too many policy elements 19:57:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 19:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000004000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1482.218614][T23426] xt_policy: too many policy elements 19:57:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}]}, 0x78) 19:57:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000010000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1482.358514][T23532] xt_policy: too many policy elements [ 1482.480918][T23535] xt_policy: too many policy elements 19:57:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000020000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 19:57:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x12000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x14, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='limits\x00') r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000edc369641db7310af6d38998826122eae8b5fed2f81d74941a861df35f31241ab7df657b464ff1a64d47c09bde766000167debfb9890fbeee9d89ea90bb1b079d6dcaa2b70190efe06e50a8181bac8fb42edb529dd0f57b793cd5b4f5168285e3716d4e9f079a1b6578343aa751579d9f30aff6553064c357d18af4039a9f07cbdbf57b78a8d1a0a31eedf03743326a6ed76aaa04a2d48ca1bf0ba939377935217204eb08159f80195e578f770da5e620d8574d71ca0ffa2f338a002ef0aff886a8bd03fd8a9629b2f497c0606637b74a5d0926248f88e172f1e9e369a1fd4b3c9e1fa031a5ba6acc8", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x48b4bc6aeaa85269, 0x0) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={r10, @in={{0x2, 0x4e21, @multicast2}}, 0x7, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r5, 0x1}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x800}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x4e22, @local}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000000000000000450000110000000000029078ac141400981414bb1100907804000000450000040000000000000000e0000002ffdfffffe83f8700000000000000e3f142e6b044012d9eefd6fc4a4bddc8ee1d569eb320b229a0c335beacf621cd6b947a8ac6346afe307ccaa9001e72f3a649ff25e5858460eb4dd5f68b7f554fd5a86972aa2448ab3ac91652aaa94c4f6dc5a6d0182d0df81cdf177643ba5144ec23c3982498070b7a"], 0xfdef) [ 1483.041039][T23550] xt_policy: too many policy elements 19:57:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x13000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x78) 19:57:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000030000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d1000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000c01b3ac6fc78e7a53000b0860000000000000000000000000000000400"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_read_part_table(0x0, 0x2, &(0x7f0000000100)=[{0x0, 0x0, 0xcf0c}, {&(0x7f0000000540)="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", 0x1e6, 0x8}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$rose(r3, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @bcast]}, 0x40) r4 = getpid() migrate_pages(r4, 0x4, &(0x7f0000000080)=0xb0, &(0x7f00000000c0)=0x8) [ 1483.291670][T23667] xt_policy: too many policy elements 19:57:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 19:57:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000040000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1483.412969][T23669] loop4: AHDI p1 p2 p3 p4 [ 1483.432170][T23669] loop4: p1 start 3870356836 is beyond EOD, truncated 19:57:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000050000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1483.460449][T23669] loop4: p2 start 17452528 is beyond EOD, truncated [ 1483.468935][T23678] xt_policy: too many policy elements [ 1483.486043][T23669] loop4: p3 start 2900971848 is beyond EOD, truncated 19:57:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 19:57:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) [ 1483.654354][T23684] xt_policy: too many policy elements 19:57:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000060000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x14000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b310000300000f9000000000000000000000000006d100000000000004000000000000000000000000000000000000000003800"/120], 0x78) 19:57:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000450000300000000008029078ac141400ac1414bb1100907804000000450000040000650000000000e0000002ffffffff"], 0xfdef) 19:57:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000070000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 19:57:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x18000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000002280000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x2}]}, 0x70) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x589000, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/6) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x1, 0xff}) 19:57:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}]}, 0x78) 19:57:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000003f0000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000040000000000001800"/120], 0x78) 19:57:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 19:57:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000400000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 19:57:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b310000300000000000000000000000001a82f2a01e000000006d1000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5670000000000"], 0x78) 19:57:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000900000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat(r2, &(0x7f0000000100)='./file0\x00', 0x4a2001, 0xae) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r9) r10 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_msfilter(r10, 0x0, 0x29, 0x0, 0x0) r11 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r11, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r11, 0x0, 0x29, 0x0, 0x0) r12 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r12, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r12, 0x0, 0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) dup2(r13, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r14, r15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup2(r16, r17) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0300618a0c7bf43cd6438783a500000000000338a3f88b4bedee65c4327245290030000000001d029078ac141400ac481498006fe7d394000000450000140000", @ANYRESHEX, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES16=r10, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX=r7, @ANYRESDEC=r12, @ANYRES16=r14, @ANYRES32=r9, @ANYRESOCT, @ANYRES16=r18], @ANYRES64=r8, @ANYRESDEC, @ANYRESHEX=0x0]], 0x3) 19:57:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 19:57:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000002c00000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 19:57:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x40}, [{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x7fffffff}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000080)={{0x2}, 0x8, 0xffffffff, 0xa8}) 19:57:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003d00000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15000000}]}, 0x78) [ 1486.051500][T23871] policy_mt_check: 7 callbacks suppressed [ 1486.051508][T23871] xt_policy: too many policy elements 19:57:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3a, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:57:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003e60000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16000000}]}, 0x78) 19:57:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x80010000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:57:58 executing program 4: truncate(&(0x7f0000000080)='./file0\x00', 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:57:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000180)={{0x2, 0x0, @descriptor="0c45684c5f2307e7"}, 0x21, [], "77921576eaee6b47d19b72d1a43d5c6610d5ac83e674dcc61cfb4203b8c9ee2fe5"}) pipe(&(0x7f0000007540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000007580)=0x2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x2, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x44}}, 0x4) [ 1486.894644][T23985] binder: 23980:23985 ioctl c0506617 20000180 returned -22 [ 1486.912308][T23986] xt_policy: too many policy elements 19:57:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000180)={0x1f, 0x1000, @any, 0x800}, 0xe) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b083b310000300000000000000000cc7b2dca000000006d10000000000000400000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f225c9376c31a459f82687a0f081f92f414db14b5999da7eca5776bebe77f5b50ecaba127862"], 0x78) 19:57:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17000000}]}, 0x78) 19:57:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003e80000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1487.081411][T23998] xt_policy: too many policy elements 19:57:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000ec0000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:57:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) [ 1487.218901][T24007] xt_policy: too many policy elements [ 1487.612524][T23985] binder: 23980:23985 ioctl c0506617 20000180 returned -22 19:58:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x2}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19000000}]}, 0x78) 19:58:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003f00000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe9020000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b5b083b330000300000000000000000030000000c0a00005101000000000000400000000000000000000000000000000000000000003800000004000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000020000000000000000000000000000001290ee0701f07f3c1a7c0d4dfe7ae999296aa27f1f8774604dd0b34c0830940914db430e7552555f0064e236e858204eb6811dda764c19f9cdc26c905c4ad2ff3d6f851b8f55c28c753388da95dc2cc641fc2bac49ed4cd48e9c781e41bee7f2cbdad4baed2eda5279bdf0aa0b763d708c44e14326aac7a0de0bb03b0fc1b17e6989d89ca64c72fa46eb6e2c6e809ac81130e80abdac81005bf743445ec6ef880ebb38ca62937bda074b071a022a29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8b1f869674ca56187097303828317985d8a0a70fea374896cf7622d0b0150d747cef937b9957a2735fb2eea3213d73cfcfac28a5571844538042357c4eeb4519bb4f3598026e7e4c64423fce0c0d845ec587c60bf7b01d8aab23bedd26a3a237226b1b9efe5641652ac6217823937f5fc15c82dbb77b4f611fae9656a40db502a0f3ad313cfb53bc92fe7013daea3a45f389ee3893aaeb9b6e07b440a3c9b27105924bcb066075fe117958ac72eda32bfd70f35c41958cd5e93410ef42fb809c613be6ad31a4343973dcab7782ab9098e6cd2f592f449debcdb67d2f1515b4b81747aa0b70b03c42793442e979631705a67f5d8687021f659c6c170b18d9392b9090b2bfae44cd9622e100adac756c0eeea04e27d1f8589fd8a0a6663dde0c018c57915add061c1c9fce13c41bc4a209fcc9b50d416bd56329cda89fffffffffffffffac160b51171553fd84d7a06567278079a473197f86f051055e159c79b8ad6efd160d90f9571d62b8a89daf3448b303cff5de31418f373cd0b36326b9ae3bd103a406b4583c4fb476ca192263bcf1d001c89ca66a70543"], 0xfe) 19:58:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x7fffffff) 19:58:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000ff0000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1488.055680][T24119] xt_policy: too many policy elements 19:58:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000020000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000030000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1488.159827][T24129] xt_policy: too many policy elements [ 1488.275932][T24134] xt_policy: too many policy elements 19:58:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 19:58:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000009000000000000000000000000000000006d10000000000000000000000000000000000000000000000000000000003800"/120], 0x78) [ 1488.390324][T24137] xt_policy: too many policy elements 19:58:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000080), 0x4) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000200000003800"/120], 0x78) 19:58:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000040000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 19:58:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x11}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1489.303445][T24249] xt_policy: too many policy elements 19:58:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000050000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800"/120], 0x78) 19:58:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 19:58:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000060000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1489.469534][T24312] xt_policy: too many policy elements 19:58:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26000000}]}, 0x78) 19:58:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000070000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27000000}]}, 0x78) 19:58:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000900000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}]}, 0x78) 19:58:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31000000}]}, 0x78) 19:58:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000ec0000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000029020000000000000000000000003800"/120], 0x78) 19:58:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000f00000000000459078ac141400ac1414bb1100907804000000450000040000000000000000e0000002d9d5f0ea7f78fd957e77d5a488da7b7111db03995bcfa7dd70de19b036"], 0xfdef) 19:58:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x12}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000280200000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000}]}, 0x78) 19:58:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000c00200000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 19:58:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 19:58:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b000000}]}, 0x78) 19:58:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:58:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x102) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x13}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000d00300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2080000}]}, 0x78) 19:58:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$phonet_pipe(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 19:58:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000}]}, 0x78) 19:58:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1491.983170][T24545] policy_mt_check: 7 callbacks suppressed [ 1491.983177][T24545] xt_policy: too many policy elements 19:58:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x28000, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0xe332211b5c329f20, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000340)={0x550, 0x2000, 0x3c0, 0x360, 0xa128, 0x4, 0x4, 0x1, {0x5}, {0x10001, 0x5, 0x1}, {0x1f, 0x400}, {0x2, 0x4}, 0x2, 0x55, 0x5, 0x20, 0x1, 0x2, 0x7, 0x9, 0x1f, 0x43a, 0xff, 0x81, 0x0, 0x4, 0x1}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r7}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0x7f}, 0x18) ioctl$KIOCSOUND(r0, 0x4b2f, 0x81) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000005041e54829cac833399530fc51b419c9eff8fa472d50e790231e6c5061924b561997103da9288a0ef04e6f0fc6adaabc918ccd9ed0a1679baf22fbf5ddeb95de7adbcf7d24fc56e6ad7321d40e07fdee1c6e1e7096ca6eee9a9ff8080f3bdd0463177a91f241c4e01bd3edce8e53ede9ce9c2d66c035d41a2a"], 0x78) 19:58:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000e60300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 19:58:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000e80300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1492.224186][T24562] xt_policy: too many policy elements [ 1492.339843][T24564] xt_policy: too many policy elements 19:58:04 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) write$P9_ROPEN(r2, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x2, 0x4, 0x6}, 0x270}}, 0x18) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000000000000000450000300000000000029078ac141400ac1414bb1100907804000000450000040000000000000000e0000002ffffffff766820d1cd0e2062e6d36dedb153f5eff2ef5c906b47c49b6f01365d13b5a1ff67f93013638fdd8413f93e0b4f34ab5ccf5bc274e68c236263604fadb801250d1e75e5fd6d0fe502717b067b4b428cc11bbeceac439518c7c12bb132bc4b0f9519cb0b62b99eaa8f2e5da99e7c9d3516ba4fe305ceb71243"], 0xfdef) 19:58:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x16}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet(0x2, 0x3, 0xa0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x3f, 0x1ff]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 19:58:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000f00300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}]}, 0x78) 19:58:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf0ffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1492.982719][T24682] xt_policy: too many policy elements 19:58:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000500000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffff9, 0x92282) write$cgroup_int(r3, &(0x7f0000000100)=0x47, 0x12) r4 = dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x40, 0x9c, 0x3717, 0x8, 0xe, "acb55ede254b822c0051e08b217e7b7fc07191"}) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:58:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x100000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) [ 1493.120802][T24690] xt_policy: too many policy elements 19:58:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000600000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) [ 1493.318944][T24701] xt_policy: too many policy elements 19:58:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x1}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x3a) 19:58:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x30}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000700000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 19:58:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f00000000c0)={0x8, 'wg1\x00', {'dummy0\x00'}, 0x400}) 19:58:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 19:58:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000022800000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1494.096990][T24719] xt_policy: too many policy elements 19:58:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000003f00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1494.207991][T24724] xt_policy: too many policy elements 19:58:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 19:58:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000004000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1494.287664][T24727] xt_policy: too many policy elements 19:58:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003802255abf7880ca5cb0a3e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec02941826b6c088ea5d220675dd213375d8d9a28ec28a2dfc88ae4eaeb457a602ea50e523d9e1a61aeabaa890e9ec5c04d9ee32e2ee076c8a67c112ea7fcb233be010a617cfa5c3d0a3edea6a2797b92cd586256c9e6d2111"], 0x78) [ 1494.478717][T24834] xt_policy: too many policy elements 19:58:06 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) accept4$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c, 0x800) 19:58:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x2}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) 19:58:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x300000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000009000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0xfffe}, [{}]}, 0x78) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000100)) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0)=0x80000001, 0x4) 19:58:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x400000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)=""/225, 0xe1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "a3fc631a6ab6d1b6b7dc553bdee5e1ca716c15b2b84c61adce0913e4d490b2b85ac2b6758c31815e534b2012b927b9d2abb2de132f7fa5da7143325f2905ae8641000f707c9fd108cbb8e076db4d7ae5"}, 0xd8) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d100000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000bd00000000000000000200"/120], 0x78) 19:58:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000002c000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 19:58:07 executing program 2: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r2, 0x0, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r2, 0xff, 0x7e}, &(0x7f0000000180)={'enc=', 'oaep', ' hash=', {'blake2b-384-generic\x00'}}, &(0x7f0000000200)="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", &(0x7f0000000300)="d6125462ea2195d7891b1608ca6195647bee5a9d0fa755295e5878839f86a22fb981dd8f85e3cd52a39d6452ef6cc45eec88fe701fd9e4cdba33cbb2bf982d4e2c2ee548630394037e6550cb3fa7d162b3ac938a4f2a7a2e9f1d68ec1a780751465b61e54dd2e54e5354173e64df5292539a1860b241793b78953381f843") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x500000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003d000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x11}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0x9d0000, 0x1118a2f3, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x99f38c86474f9c79, 0x7fff, [], @p_u8=&(0x7f0000000080)=0x3e}}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000540)={0x2, 0xa, &(0x7f0000000140)="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"}) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000400"/120], 0x78) socket$kcm(0x29, 0x0, 0x0) 19:58:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 19:58:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003e600000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x600000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x3a) 19:58:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900d1b92a764427cb978"], 0x78) 19:58:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003e800000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 19:58:08 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) r5 = socket$caif_stream(0x25, 0x1, 0x3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r7}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffc0, 0x1}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="08afb16d5ae8"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="5a88fe9b6ef6"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x840) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x200000000201, 0x840) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f00000000c0)=0x9, 0x8) write$binfmt_elf64(r8, &(0x7f0000000180)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x3, 0x2, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3}, [{}]}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r9, 0x0, 0xb, &(0x7f0000000100)='/dev/vcsa#\x00'}, 0x30) fcntl$getflags(r10, 0x1) 19:58:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 19:58:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000ec00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x12}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x700000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 19:58:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000003f000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:09 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x0) 19:58:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000001300)={@void, @val={0x3, 0x0, 0x2}, @mpls={[{0x400, 0x0, 0x1}, {0x8a}], @ipv4=@dccp={{0xc, 0x4, 0x0, 0x6, 0x104e, 0x67, 0x0, 0x5, 0x21, 0x0, @remote, @local, {[@cipso={0x86, 0x8, 0xb0b9f952a3ce2d8d, [{0x6, 0x2}]}, @cipso={0x86, 0x11, 0xfffffffffffffffe, [{0x5, 0x5, "6a67e4"}, {0x2, 0x6, "c44e2f7d"}]}]}}, {{0x4e21, 0x4e20, 0x4, 0x1, 0x2, 0x0, 0x0, 0x5, 0x7, "599e8a", 0x5, "bb2ca5"}, "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"}}}}, 0x1060) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x0, 0x7]}, 0x8) [ 1497.493557][T25226] policy_mt_check: 6 callbacks suppressed [ 1497.493565][T25226] xt_policy: too many policy elements 19:58:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x800000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_pts(r6, 0x404000) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f00000000c0)) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:58:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000ff00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) [ 1497.754672][T25343] xt_policy: too many policy elements 19:58:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}]}, 0x78) 19:58:09 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000004000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1497.944124][T25351] xt_policy: too many policy elements 19:58:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x13}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 19:58:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000010000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000001040000ff0f000000000000009078b11a6cc20bec1e1c040000004500002d1b09000000b01d02e82d4da55e38903aeaa7b6e8"], 0xfdef) 19:58:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x900000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$binfmt_elf64(r7, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYBLOB="13b3b39190582551b4f0164a3eb6600448ce2883d6945e4fe986991955e876a32aa595039aac51481c683f582f3d3410c700d3ecb24be17a9f1e0a0e64c5cea36976cb", @ANYRESHEX=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="48683084b86af9a705369157", @ANYRES64=0x0], 0x96) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$P9_RATTACH(r10, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x10, 0x4, 0x6}}, 0x14) [ 1498.703595][T25369] xt_policy: too many policy elements 19:58:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 19:58:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000020000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) [ 1498.897256][T25379] xt_policy: too many policy elements 19:58:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) [ 1499.020027][T25383] xt_policy: too many policy elements 19:58:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xa00000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x16}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x1}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000340)={0xfffffff, 0x4, 0x5, r3, 0x0, &(0x7f0000000300)={0x9909d3, 0x7, [], @p_u8=&(0x7f00000002c0)=0x6}}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x8, &(0x7f00000000c0)="412496174317dcfb", 0x9d, 0x0, &(0x7f0000000100)="8afcda92f7dcac766d5d2d181b59af70310985236f4b27960f1988cab27d67944fe9c37c7f405a85c6da33bde34790d9f4c7e999b7472c9f98614468638bf938211b33ff3cd9d039ec67437f81418f366b24f37e10dad4c0c432c60c54973e5fc4fee5feca8ad801c560c6994b2ea63be1002977f53aacae34ab48358dab004f2ee2117ccd58d625f2ec7e08f685f884ba6229fd1fd7058ff6425d8acb"}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r5) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000280)=0x1c7) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x2, 0x3, 0x21e, 0x81, r6}) 19:58:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000040000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1500000000000000}]}, 0x78) 19:58:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xb00000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000180)={@void, @void, @mpls={[{0x9}, {0x809, 0x0, 0x1}, {0x6}, {0x41, 0x0, 0x1}], @ipv6=@udp={0x7, 0x6, "d13cbb", 0x18e, 0x11, 0x3, @empty, @empty, {[@hopopts={0x87, 0x2, [], [@ra={0x5, 0x2, 0x4}, @pad1, @ra={0x5, 0x2, 0x81}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x89, 0xc, 0x2, 0x2, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @dev={0xfe, 0x80, [], 0x34}, @loopback, @dev={0xfe, 0x80, [], 0xd}, @empty]}, @fragment={0xff, 0x0, 0x20, 0x1, 0x0, 0x5, 0x64}, @dstopts={0x0, 0x16, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x687d}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x4}, @pad1, @generic={0x1, 0x84, "fd74b1529adb7bd5230eda47bc415de995f5a5826001b83044d88cf271227d547174251defee970c0fbb831387316eb40185083794da9edb3d5cbed1a056b64b442c0a83de530ec5f3a25d33ad65cf35ad726ce53bf009a2c03cbdb3b0a7bc9195a4a04454e415ccee455688b3d55e755ba10645bacb3be1ffbb76dbd7db7075d4b82624"}, @enc_lim={0x4, 0x1, 0x6c}]}], {0x4e20, 0x4e23, 0x46, 0x0, [@guehdr={0x1, 0x0, 0x1, 0x40, 0x100, @void}, @guehdr={0x1, 0x1, 0x1, 0x81, 0x0, @void}, @guehdr={0x2, 0x0, 0x3, 0x5, 0x100}, @guehdr={0x2, 0x1, 0x3, 0x3f}, @guehdr={0x2, 0x1, 0x3, 0xac, 0x100}, @guehdr={0x2, 0x0, 0x2, 0x7}, @guehdr={0x1, 0x0, 0x0, 0x2, 0x0, @void}], "b04adf6fefa23fe498ea8a4213183dcb7cdb"}}}}}, 0x1c6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = pidfd_getfd(r6, r0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r7, 0x5381) r8 = dup2(r2, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = accept$alg(r11, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r12, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U-', 0x2}, 0x16, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d4000000487cc5da3dbdb5843e4aec8bc076", @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf250c00000004000b0009000700008cacb3df00000004000b000800370002000000110007003806ce2d22249f62cc3c0ee6bd0000000f000a00017ea1af04873b5a581842000900070072df9c58250000005c0050800500090002000000110001002b2094b56131e7066de320ded900000009000100cec0641ff6000000110001003ab5e5d73ec031d3b7d9efa5c8000000050002000100000009000100f71ed9685700000005000900000000000a000600aaaaaaaaaabb00000a000600ffffffffffff0000"], 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r15 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r15, 0x0, r14) r16 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r18 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r18, 0x0, r17) r19 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r21 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r21, 0x0, r20) r22 = getgid() getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f00000005c0)) r24 = getgid() r25 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r27 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r27, 0x0, r26) r28 = getegid() setgroups(0x8, &(0x7f0000000600)=[r14, r17, r20, r22, r23, r24, r26, r28]) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe00000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1600000000000000}]}, 0x78) [ 1499.893725][T25502] xt_policy: too many policy elements 19:58:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000050000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = eventfd(0x3) r6 = dup2(r5, r1) r7 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x4804c0) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={r11, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0xf3, 0x0, 0x0, 0xe3, 0xfff, 0x1f}, &(0x7f0000000040)=0x9c) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0xa8, r12, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x2880) r13 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1af000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup2(r14, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$KVM_SIGNAL_MSI(r16, 0x4020aea5, &(0x7f0000000340)={0x3000, 0x5000, 0x100, 0x7, 0x5}) ioctl$DRM_IOCTL_GET_STATS(r13, 0x80f86406, &(0x7f00000000c0)=""/142) ioctl$KVM_GET_API_VERSION(r13, 0xae00, 0x0) 19:58:12 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000060000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1700000000000000}]}, 0x78) [ 1500.099945][T25517] xt_policy: too many policy elements [ 1500.251533][T25524] xt_policy: too many policy elements 19:58:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x30}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000070000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 19:58:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf00000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d02000d69b78365615e0000000000400000000000000000000000000000000097f8000000000038000000000000000000000000000000000000000e00"/124], 0x78) 19:58:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x41e000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSTI(r4, 0x5412, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000100)={0xfffffe01, &(0x7f0000000000)=[r8, r2, 0xffffffffffffffff]}, 0x3) write$tun(r0, &(0x7f0000000200)={@void, @val={0x3}, @mpls={[], @ipv4=@generic={{0x14, 0x4, 0x0, 0x5, 0xf5, 0x67, 0x0, 0x9, 0x62, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x30, 0x3, [{0x7, 0x7, "616022c2bc"}, {0x1, 0x4, "ca55"}, {0x0, 0xa, "a1036d4680b311bf"}, {0x0, 0xc, "c970542f211d375039d6"}, {0x6, 0x9, "038490d2dbf6e2"}]}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @end]}}, "445bf7f379ea7ba8e095e57563fcf6173a8debec5e4c3790c1aea80f5219f1db94f0ef07c72580077dff7c69207c66c970de4faa6129b7044adfb5ad9bb09024181f8c88da06a6a81bfb058cde1cbfdbb6a6bd19adfcb5d0cd952d36cc16c7d87c56da8873957dd888eec743d9c8b1c2a7546b1d188b6b2ddcc78f72c1e99ab4128e1bb95ada918c952e82814ba4666b067b94d10f44aa70e4b996e4b8ec0f7e5a524d5fc0"}}}, 0xff) [ 1501.078699][T25638] xt_policy: too many policy elements 19:58:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1900000000000000}]}, 0x78) 19:58:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1000000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002280000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:13 executing program 4: r0 = msgget(0x1, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r1, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000080)={0x51, 0xe76b, 0x6, {0x80, 0x800}, {0x7f, 0x1}, @ramp={0x1ff, 0x8, {0x7, 0x5, 0x5, 0x3ff}}}) msgctl$MSG_STAT(r0, 0xb, &(0x7f00000004c0)=""/110) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/246) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000300)={0x1, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b310000306d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000080f7ffffffffffffff00000000000000000000000000000000000000000000000000002f11e7732d"], 0x78) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) 19:58:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 19:58:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000003f0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 19:58:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000400000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0x990000, 0x5, 0x4, r0, 0x0, &(0x7f00000000c0)={0x9a0918, 0x4, [], @value64=0x7}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000180)={0xe0ca, 0xfffffffc, 0x9}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000200)={'veth0_to_team\x00', 0x7}) 19:58:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1100000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:14 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x0) 19:58:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) 19:58:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x105800, 0x0) connect$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @none, 0x1}, 0xa) r4 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000080)) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:58:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000900000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2600000000000000}]}, 0x78) 19:58:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002c00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2700000000000000}]}, 0x78) [ 1502.539421][T25800] policy_mt_check: 4 callbacks suppressed [ 1502.539430][T25800] xt_policy: too many policy elements 19:58:15 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003d00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000000000000}]}, 0x78) 19:58:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1200000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0xfffffffffffffffd, 0x0, 0xfffd, 0x38, 0x0, 0x0, 0x0, 0xf553}, [{}]}, 0x78) 19:58:15 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r0, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'wg1\x00', 0x10}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000280)='cgroup2\x00', 0x1) r5 = dup2(r3, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x40, 0x402) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet(0x2, 0x4000000805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = dup3(r10, r11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @local}], 0x30) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x4004014, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x400d4, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="02002000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000300)={r13, @in6={{0xa, 0x4e24, 0x7ff, @mcast1, 0x7}}, 0x9, 0x1}, &(0x7f00000003c0)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000400)={r14, 0xff}, &(0x7f0000000440)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup2(r15, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r17, 0xc0106426, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f0000000240)={r18, 0x1}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x3a) [ 1503.494804][T25914] xt_policy: too many policy elements 19:58:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1300000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003e60000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x3, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x231, 0x0, 0x0, 0x38, 0x2, 0x8000}, [{0x0, 0x5, 0x4, 0x7, 0x9, 0x8, 0x401, 0x3}, {0x0, 0x5, 0x3f, 0xb02, 0xe071, 0x0, 0x400, 0x25d2}]}, 0xb0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:58:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3100000000000000}]}, 0x78) [ 1503.740829][T26030] xt_policy: too many policy elements 19:58:15 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003e80000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000}]}, 0x78) [ 1503.905589][T26037] xt_policy: too many policy elements 19:58:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000ec0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 19:58:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1400000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x141002, 0x0) getsockname$l2tp(r2, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03423406e4fb2ddf42b92453b00000adab55d594657e00000000029078ac141400ac1414bb110090780400000052d8dc348d3733dd8d50439fe5cc1f82edd6"], 0xfdef) 19:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b5b083b31fc0030070000000000000000000000000000000e0300000000000040000000000000000000000000000000000000004930b1fbcd5c4818000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400150000000000677028856b854a"], 0x7f) r1 = getpid() r2 = socket$inet(0x2, 0x5, 0xf8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000180)=0x5, 0x4) sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r3 = syz_open_procfs(r1, &(0x7f0000000080)='net/tcp6\x00') connect$l2tp6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x80000001, @mcast2, 0x6}, 0x20) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x1, 0x10, 0x1, r4}) 19:58:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x1800000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) [ 1504.626726][T26055] xt_policy: too many policy elements 19:58:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003f00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x34, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x3}}, 0x40) 19:58:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b00000000000000}]}, 0x78) [ 1504.886893][T26171] xt_policy: too many policy elements 19:58:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000ff0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1505.093226][T26179] xt_policy: too many policy elements 19:58:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/94) 19:58:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc208000000000000}]}, 0x78) 19:58:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000040000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x3f00000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:17 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x420000015001}) delete_module(&(0x7f0000000000)='/dev/net/tun\x00', 0x200) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x408000, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x5, 0x800, 0x5, 0xfffffffffffffc01, 0xfffffffffffffff9}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000180)) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000300)={0x2, 0xff}) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5da0883c570b3125690c1f0c25009f0faa54806a047d0fcdceaa1760f009bbe76a52a2c4354ee94658d2523f2e8fe24f981239fa8d77365333e8b364b77fc0028d8eb3ea494430ec9b191ea9e7f2ea257bdede6461c1a2912813de87ef6e80556fdb152026c0ad76f89bfa335cae7b53fd7e6c56ae98bbf2cddeaa64b4cf116826910c00"/147, @ANYBLOB="cacb0df81f8df08a4d5370e80f91398ab56f7560230bb49660a897a7067a597ec5d07d34e8e0288a303ac1fd8f84b53225b13f00a9ae8d0b0e6d42"], 0x2) [ 1505.800665][T26188] xt_policy: too many policy elements 19:58:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000100000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x6000000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000000}]}, 0x78) 19:58:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x2}, [{}]}, 0x78) [ 1505.997888][T26206] xt_policy: too many policy elements 19:58:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000200000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2) [ 1506.216172][T26216] xt_policy: too many policy elements 19:58:19 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000300000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x8001000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3) 19:58:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x0, 0x38, 0x0, 0x4000}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}]}, 0x78) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x2c, r3, 0x7, 0x0, 0x0, {0x5}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r5 = socket$caif_stream(0x25, 0x1, 0x3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r7}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000440)={@empty, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@remote, @empty, 0x0}, &(0x7f0000000500)=0xc) r10 = socket$caif_stream(0x25, 0x1, 0x3) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r12}) r13 = socket$caif_stream(0x25, 0x1, 0x3) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r15}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="100827bd7000fbdbdf25040000001c000180080003000200000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3400018014000200626f6e645f736c6176655f3000000000140002006873723000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="14000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="7800018008000100", @ANYRES32=r8, @ANYBLOB="14000200726f736b30000000006c003c3000000000000000140002006772653000000000000000000000671e393f95cc267dd3725f8596070000080001003ed021ae940cca82abc235cbd4284b7d31eb7ea16b8f0eecd96ede22a90dfa4d6f8ad2ed5ca7d13837b1f403f2e266ac9f55916c9599fd71f3369aa0d25d95f7a3c05c7ad5447775ee20", @ANYRES32=r9, @ANYBLOB="0800030002000000080003000300000008000100", @ANYRES32=r12, @ANYBLOB="08000300000000001400020076657468315f746f5f626f6e6400000008000100", @ANYRES32=r15, @ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f00000002c0)={0x1, 0x0, &(0x7f00000001c0), &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r16 = msgget$private(0x0, 0x200) r17 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x4600, 0x0) r18 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r17, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r18, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x8081) msgctl$IPC_STAT(r16, 0x2, &(0x7f0000000080)=""/236) 19:58:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r8, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet(0x2, 0x4000000805, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = dup3(r11, r12, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r13, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r12, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x7a, &(0x7f000059aff8)={r14}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000200)={r14, 0x71, "6a816b91dfabb1fdd80f3fed1393c6c53591478644378d817737a2ad3a2425d56658c1b8435edab59c2a3f5512638873c00e5b8d9b74c25f68b71526cb8ee154a536c8e8544a80c49f2c1224a0b2c02dbd9aa705d2c50c94cb62cf9d8e3e53df0a198917b4155af33c718caf76f48be73b"}, &(0x7f0000000100)=0x79) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000180)={r15, 0x3}, 0x8) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000000c0)) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4) 19:58:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000400000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x9effffff00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5) 19:58:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000500000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6) 19:58:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x7}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000600000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x7) 19:58:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xe902000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:20 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x29, &(0x7f0000000340)={'security\x00'}, &(0x7f0000000480)=0x54) setsockopt(r1, 0x8, 0x4, &(0x7f0000000700)="c0ca8785f32482ed49d9ce3e6593ac32cf96cd7fb0cbca56cdb1be2b395114a1b111c55a550abe8e1f439b08a144ba8e7b6be2192526f52509ad1e490c06136218cd1695d46322127cc0d10d6b3405bac17e0fdf52a56a415c0378ad82f5400e3dfc7c93eaeec3ba48d164f7066915537cc45622238b5919202e28c6a38233d1a78d6150729c0de2b8b7ffdb7c76d192210203ccac0ef8ea48c372866249a2799dc6b2055bc3e803df10fbab3d8c3146fe233d47cb5aad75", 0xb8) r5 = accept4(r1, &(0x7f00000000c0)=@ll, &(0x7f0000000140)=0x80, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f00000005c0)={&(0x7f0000000540)={0x24, r7, 0x163, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0xf000000}, 0x0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="0e6d18000000", @ANYRES16=r7, @ANYBLOB="100025bd7000fcdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x84000}, 0x30000004) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0xc8}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x1f}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x408c1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d100000000000004000000000000000000000fe584489782651b40000003800000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000008c33b20d2ee53ff3c210776dcab276c0429812c04d679a06444552861aa5c2e8eca7a92680f06726cbb9d8c01f3bde69d833f68f741f12180123cbb590412a7563a0a14a9ba678d521613acd9468652d6420be6637427d6e476cb0b02981d8f8ed5d8bb8a9c096ec89af8d1c67a5d064a7c2296410259182a823f8d79ead936018db35d99d25ad382e7967a818266c6175c958cb0bd074e17aa15ac0bdb82abc979c974595be9544b9f9aef94b3dde55139054daac647f814f6767d503564bb64200cbb6d79b023ec1a3d55a34051dfa11944864710a0a8dcae900cce15d244d2af8f7419fca97f9d23145576efbdf27f63c57ff37ecdbc7a8c407ef0b9964d7f764386a7009ca836bd5fb00aee450f4e2eaa9caa8c58603c97c169baa17a0ba1d68efb0fdcc41c5f0e7b90c10549b2b"], 0x78) [ 1508.217115][T26462] policy_mt_check: 3 callbacks suppressed [ 1508.217123][T26462] xt_policy: too many policy elements [ 1508.279231][T26465] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1508.295194][T26465] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1508.342724][T26468] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1508.351125][T26468] netlink: 'syz-executor.4': attribute type 2 has an invalid length. 19:58:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xf0ffffff00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x8) 19:58:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000700000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000080)={0x5, 0x7, 0xa3f, {0x6, 0x1}, 0x8, 0xa0}) 19:58:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x3) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f0000000240)=0x8000, 0x4) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004140)={'veth1_macvtap\x00', r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) setresuid(0x0, r9, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004180)={{{@in6=@remote, @in=@broadcast, 0x4e20, 0x1a25, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x88, r7, r9}, {0x621, 0x0, 0xc252, 0x4, 0x81, 0x7, 0x80, 0xb3a9}, {0xfc3, 0x0, 0xf09, 0x37}, 0x3f, 0x6e6bbd, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x18}, 0x2, @in=@loopback, 0x3505, 0x1, 0x3, 0x0, 0x6, 0x327c, 0x1d}}, 0xe8) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1508.589252][T26473] xt_policy: too many policy elements 19:58:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000022800000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xffffff7f00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1508.823169][T26484] xt_policy: too many policy elements 19:58:21 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x9) 19:58:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) r4 = dup3(r1, r3, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x2, 0x4000000805, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = dup3(r8, r9, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r11, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$caif_stream(0x25, 0x1, 0x3) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r16}) connect$can_bcm(r13, &(0x7f0000001200)={0x1d, r16}, 0x10) sendto$inet(r9, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r17}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000080)={r17, 0x1000, "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"}, &(0x7f00000010c0)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001100)={r18, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x3, 0x5, 0x9, 0x0, 0xffffff7f, 0x6}, &(0x7f00000011c0)=0x9c) 19:58:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000003f00000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xffffffff00000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1509.339511][T26595] xt_policy: too many policy elements 19:58:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000030070000300000000000029078ac141400ac1414bb1100907804000000450000040000000000000000e0000002ffffffff"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x8, 0x8, "3f969730037678e187180060063de95f482eaebf44d81fe240fa8be35a6bcc99cb1c45aebfff031234417db808c30890356415d7450edef30f88479e72819f5a", "ae435a2fc468d62d10f7c1019e74e9c97e8f86e9487207cbdef3ead2c1a6bef764cfd147717f50f2ad27aad60ac338d13006e1e50b1e72b3d52ba1cffb874adb", "af790cb03b06559c5f499d98a2cf862407f9cdb7165d95f0f23113245f39c9bb", [0x1, 0xae9]}) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f00000000c0)='syz0\x00') 19:58:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xa) 19:58:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0xfffffffffffff000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000004000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xb) [ 1509.584845][T26614] xt_policy: too many policy elements 19:58:21 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000009000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xc) [ 1509.751364][T26720] xt_policy: too many policy elements 19:58:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000002c000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:22 executing program 4: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d1000000000000040000000000000000029de09540f0c00000000000000000000000000380000000000590000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000da9f35f3bd2808710ead4bf6b4973bb353af5b49cd0e616494b83ded32f56c1389abdf0271887b9a65843406c66bd6b2acfb9a0b1f76290f1ec3026fcba297669587e7eff5afab2b60c2ed67930689c43c104add890492f3dd4bc3b4267a1c9f7ff1a5db84d28adc98f1e4818a8148f99167dcc3e208aaf428c360f138983ee99f8cc60a6f229102e0b5c5c81191818ef938056471963690ee9b65fe91976eef93d784cfd4b94c3d5bb74366186151a50f372d52f7907a2daa50ebd37cbff680122ec595e30dee48e6d9522d01f4cd5ae71a6a98b2eaaa8439a6d5e15573e2baf6"], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000340)={0x20000, 0x4aaa, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9909e1, 0x8, [], @value64=0xfffffffffffffff7}}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x0, 0xd000, 0x5, 0x7, 0x7}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000040)={{0x0, 0x100000, 0x9, 0x0, 0x3f, 0x8, 0x6, 0x6, 0x9, 0x55, 0x5, 0x20}, {0x10000, 0x10000, 0x3, 0x2, 0x5, 0x1, 0x80, 0x1f, 0xc0, 0x7, 0x2, 0x6}, {0xd000, 0x3000, 0x6, 0x9e, 0x7f, 0x2, 0x6, 0x20, 0x20, 0x5, 0x35, 0x5}, {0x10000, 0x0, 0xe, 0x40, 0x7, 0x9, 0x5, 0x0, 0x0, 0xd3, 0x81, 0x1}, {0x100000, 0xd000, 0xd, 0xfc, 0x2, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x9}, {0x4, 0xf000, 0x4, 0x81, 0x7, 0x40, 0x6, 0x0, 0x1, 0x7, 0x2, 0xf9}, {0x3000, 0xded3b5891b3ac3a3, 0x4, 0xf4, 0x1e, 0x9, 0x4, 0x5, 0x25, 0x7, 0xff}, {0x4, 0x4000, 0xf, 0x0, 0x6, 0x8, 0x0, 0x1f, 0x6, 0x2f, 0x1f, 0x52}, {0x10000, 0x2}, {0x5000, 0x6000}, 0x8, 0x0, 0x0, 0x122010, 0x4, 0x4000, 0x0, [0x800, 0x10001, 0x8, 0x7]}) 19:58:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xd) 19:58:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r3, &(0x7f0000000180)={@val={0x0, 0x5}, @val={0x1, 0x0, 0x0, 0xfffc}, @mpls={[], @ipv4=@icmp={{0xc, 0x4, 0x0, 0x0, 0x4c, 0x67, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote, {[@end, @noop, @end, @lsrr={0x83, 0x17, 0x5c, [@local, @multicast1, @remote, @local, @broadcast]}]}}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x5a) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000500)={0x53, 0xfffffffffffffffe, 0xcc, 0x6, @buffer={0x0, 0xe0, &(0x7f0000000200)=""/224}, &(0x7f0000000300)="a3c487caf1afe1d3b38eccb404e10ab24018e2a531c5ad90b742d629cb91c2b2c2ea6882dad1537e34225913cb7e6fff471fc7d5dd7fc133778732319b143d6bca8f28bbfc86bd8d89dbb12d4faddd5e4b317c3cd210245af1eff5fa76d0bbd07d502d264b1830be43da3a50ec7b16c1e2ce46b4d69ab789b2b8d2311b258ac662aa0c172d28dd6b61516ac33c1ed94820f867c2ffe70e176034ce9f6f36a44cd8362b95ca146719ab275b94beb64984fe99f2efeb134cf219aad926de6cf6d6c61746c69ddefae652d33b60", &(0x7f0000000400)=""/203, 0x1f, 0x10021, 0xffffffffffffffff, &(0x7f0000000100)}) [ 1510.435237][T26729] xt_policy: too many policy elements 19:58:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000003d000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xe) 19:58:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31230030000000000000000000000000000000006d1000000000000040000000000000000000000000000000000000000000380000000000000000000000000000008d6e4200"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r4, 0x6}}, 0x10) 19:58:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000003e600000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1510.556085][T26743] xt_policy: too many policy elements 19:58:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0xf) [ 1510.674867][T26750] xt_policy: too many policy elements 19:58:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x90}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000003e800000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x10) 19:58:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x2, 0x800, 0xcd) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x3, 0x2, 0x56}, 0x6) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d1000000000000040000000bcd200003800"/118], 0x78) r2 = dup(r0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L+', 0x101}, 0x16, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r4) r5 = accept$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) sendto(r5, &(0x7f0000000180)="9e7f57a8cda6376d42a0689d308922ee63223623e8f940a9310909c99802ac2af3747b1a73e58b5bd9f047266d4a81cd1a11e4edce015ba27790ee0dd7eb33d3e11e0cdeb7326bb2083c0e7e6c6d0f3c3c479aa6ad79f5120983196f8424408af94669633593c297711e70a156b9fe9fd98ebc7eccfb8fea9bd2844138c529bc441b00334d4dc61ce5dfc96857791d0b7fe2fc452dbba630ba4f221894e3cbe41daf65ec98e06f47b5640097d8ee3e2518e07c2d01", 0xb5, 0x40c1, &(0x7f0000000240)=@hci={0x1f, 0x4, 0x2}, 0x80) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 19:58:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f00000000c0)={'ip_vti0\x00', {0x7, 0x4e23, @remote}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1511.640936][T26871] xt_policy: too many policy elements 19:58:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000ec00000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x11) 19:58:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d1000000000000040000000000000000000000000000000000000000600"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000080), 0x10) 19:58:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000003f000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x12) 19:58:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x13) 19:58:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000ff00000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b310000300000000000000000006d10000000000000400000000000000000000000000000000000000000003800"/88], 0x78) 19:58:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000000000000004500f15a29257ea40ad2590a41cb2230001ac10ee8029078ac1414120b1414bb11b2e8c835b9301bfd2317185c86ca7a009078c318eeff44000004001f2b"], 0x1) 19:58:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r7, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r9, 0xc0585609, &(0x7f00000000c0)={0x3f, 0x8, 0x4, 0x2000000, 0x7, {0x77359400}, {0x1, 0xc, 0x2, 0x4, 0x7, 0x1, "6381240a"}, 0x3, 0x3, @offset=0x3f, 0xffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000080)={0x0, 0x81, 0x0, 0x0, 0x5, 0x1, 0x4, 0x7f, 0x7, 0x48, 0x5, 0x80, 0x0, 0x8, 0x2, 0x20, 0x8, 0xe3, 0x5, [], 0x1f, 0x1}) 19:58:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000200000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x14) 19:58:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000300000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x15) 19:58:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000400000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x16) 19:58:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000500000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x17) [ 1513.313711][T26944] policy_mt_check: 6 callbacks suppressed [ 1513.313720][T26944] xt_policy: too many policy elements 19:58:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f00000000c0)=0xfffffffb) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x2}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x18) 19:58:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000600000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000000c0)={0xffff, 0x0, [], {0x0, @reserved}}) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x6, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106a, 0x40, 0x21d, 0x0, 0x20, 0x38, 0x0, 0x5, 0x0, 0x2}, [{0x1, 0x1, 0x8585, 0x7f, 0x4, 0xffffffffffffffff, 0x3, 0x3}, {0x7, 0x4, 0x1, 0x7e, 0x3, 0x10000, 0x2000000000007, 0x3}], "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"}, 0x213) 19:58:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1513.965405][T26953] xt_policy: too many policy elements 19:58:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000700000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x19) 19:58:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000009000000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1514.162207][T26968] xt_policy: too many policy elements 19:58:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000ec00000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000002802000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1514.275487][T26973] xt_policy: too many policy elements [ 1514.372691][T26976] xt_policy: too many policy elements [ 1514.440456][T26978] xt_policy: too many policy elements 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x1a) 19:58:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000c002000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:27 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000080)={0x6, 'macvlan0\x00', {0x3}, 0x8000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) 19:58:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x11}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r2) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xf6, 0x6, 0x2, "3f94eff0493e62a03128d981603a1659", "2aae3d3204a5de185b8a98f3a20f7847bdac204e566ac401525715b204a13827c91da71399c33c65d7ca65d5233eb72551c920862cd75aea537b06cbe0c1f4909e2094e5557d15a3cfd153f39ddbaabbef3c09e941a1760366952187aac11c813fcc3123fa16353d9f3abf441f17d53832f54c314386945d177479e2b17645856e227b4bbaf0062b93f5f1c63e85776be6d07cc13e32b6075589652cd3f4cf3f9be35fbe8a1541b580915ae4afce50f24f62a02bb0d1c49b0a8e8cf1ba9919527789be792431bea0cc85b160f0f8ecfbdec3f72e10a95750a19e85c2102e106f92"}, 0xf6, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r7, r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r10, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES16, @ANYBLOB="2491ff879c93567bfd29c25d1a43", @ANYPTR=&(0x7f0000000280)=ANY=[], @ANYRES64=r7], 0x5) 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x1b) 19:58:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1515.357784][T27098] xt_policy: too many policy elements 19:58:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x1c) 19:58:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket$caif_stream(0x25, 0x1, 0x3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r7}) r8 = socket$caif_stream(0x25, 0x1, 0x3) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r10}) r11 = socket$caif_stream(0x25, 0x1, 0x3) r12 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r13}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'macvtap0\x00', r13}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_1\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20004410) [ 1515.638190][T27210] xt_policy: too many policy elements 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x1d) 19:58:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000d003000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x1e) [ 1515.795762][T27218] xt_policy: too many policy elements 19:58:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000e603000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x21) [ 1515.943491][T27222] xt_policy: too many policy elements 19:58:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x12}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x22) 19:58:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xe}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000e803000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:28 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000080)) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='\x00', r3}, 0x10) fadvise64(r4, 0x205400000, 0x7780000, 0x2) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="eb496fc91111aeb8463dcabb5f1b5b083b310000301f0000000000006d100000000000004000002300000000000000000000000000000000000038000000010000000000000000000000000000000000000000000000c35d376f7bbb14ce00"/133], 0x78) 19:58:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x3a) 19:58:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x23) 19:58:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000f003000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x24) 19:58:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000005000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x25) 19:58:28 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000006000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x13}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:29 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) flistxattr(r0, &(0x7f0000000080)=""/253, 0xfd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b0800000000006d100000e3ffffff40000000000000000000007bd4b1f14381cccf4ee4000000000000000400ffff000000000000000000000000000000000000000000000000000000000000000000000000000015384500"/117], 0x78) 19:58:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000007000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x26) 19:58:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0x5, 0x7fffffff, 0x10000, 0x4}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x1) 19:58:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000228000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x27) 19:58:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000003f000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000040000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x28) 19:58:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x16}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000090000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x29) 19:58:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$perf(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6000010, 0x8010, r2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x2081, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f00000000c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x24, r7, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x242680, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r9, 0xab07, 0x2) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001400)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r12, r13) write$binfmt_elf64(r4, &(0x7f00000012c0)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000002500)=ANY=[@ANYBLOB="a1610a241e7a2cee18bf988f2f960f13ec1d5cd4ddb6a8162a4786ad6758afaf3151d2b4890fcd5c6c53ea3531c295", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r5], @ANYRES16, @ANYPTR=&(0x7f00000024c0)=ANY=[@ANYRES16=r13, @ANYRES16=0x0, @ANYRES16=r10], @ANYBLOB="66fa7cb92bab5d7c8167b3b9d52fff5314c645029cd6891ba16dfd7b9e8aa5e94b440770e55ee41416ea597718473695f09d561d23be76eb738225fa78311dc08e135019db08354ead4603eb38f80c41ba6407f805c43de197ea3613cc4414e64284380fbe1dba6607ef0c008db36f", @ANYRES16=0x0, @ANYRESDEC], @ANYPTR=&(0x7f0000001440)=ANY=[@ANYRESOCT=r6, @ANYRESHEX, @ANYRES32=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRESHEX=r6, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64], @ANYRES32=r8, @ANYRESOCT=0x0, @ANYRESDEC=r8], 0x47) 19:58:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x80}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x64, 0x0, 0x0, 0x0, 0x1, @remote, @broadcast}}}}}, 0x3a) 19:58:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2a) 19:58:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x12}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1518.945226][T27510] policy_mt_check: 8 callbacks suppressed [ 1518.945233][T27510] xt_policy: too many policy elements 19:58:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000002c0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2b) 19:58:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003d0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2c) [ 1519.097003][T27521] xt_policy: too many policy elements [ 1519.223949][T27528] xt_policy: too many policy elements 19:58:32 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x30}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003e6000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2d) 19:58:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x13}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:32 executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000000)=0x1a0e, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x192) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x20, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x2, 0x3}, &(0x7f0000000140)=0x10) r3 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) ioctl$SOUND_MIXER_READ_CAPS(r1, 0x80044dfc, &(0x7f00000003c0)) 19:58:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7, 0x2, 0x80000000}, &(0x7f0000000100)=0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003e8000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1520.170776][T27541] xt_policy: too many policy elements 19:58:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2e) 19:58:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x14}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000ec000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000003f0000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:32 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000ff000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1520.309081][T27552] xt_policy: too many policy elements [ 1520.451114][T27564] xt_policy: too many policy elements [ 1520.540244][T27567] xt_policy: too many policy elements [ 1520.616010][T27569] xt_policy: too many policy elements 19:58:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x2}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000040000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x2f) 19:58:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x18}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:33 executing program 4: prctl$PR_SVE_GET_VL(0x33, 0x12ab5) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x3b, 0x9, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40, 0x0, 0x0, 0x5, 0x38, 0x0, 0x0, 0x0, 0x200}, [{0x0, 0x4}], "", [[], [], [], [], [], [], [], [], [], []]}, 0xa78) 19:58:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x3a) [ 1521.553310][T27677] xt_policy: too many policy elements 19:58:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000100000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:33 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000000)={{0x1, 0x7f}, {0x4, 0xbe}, 0x7f, 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r3, 0x5606, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x80800, 0x0) 19:58:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x30) 19:58:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x60}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1521.755188][T27694] xt_policy: too many policy elements 19:58:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x31) 19:58:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000200000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x11}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x32) 19:58:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000300000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:34 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}], "46e8c95da9211440e6fc99dcde6bf916203036be1f50e6b0ecddfe2f9cfb4845584cca4f3cddb7d15bd276efa58f78ce3fe9e5f577590c44bbf3a7530b46b02143992eca348e7675b99e81287584b16a7f69c9aa7f8c9c9abd57044ef52555186e2cf1d29eb998c699019f4bb3b4ee7e6ef92ba701fcacc31dab2daa32cddabf149b7d3a1b107a28f8fe134fb785287172a43722f3243b53a12b6cce773dc36424dc660a29d676a1dd02ff8a34500ddf34e8e810329b4c62f48e0785e1e1ac1374435f0377770ffd9a22cdab811278491542d95b340c64db22d51a"}, 0x153) 19:58:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf0}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:34 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0310000000000000000045000030eb00000000029078ac141400ac142fbb110090780400000041000004000000002744fa85445ee436370189a310210073b9496c6015fb70accd2e4960"], 0xfdef) 19:58:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x33) 19:58:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000400000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x180}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000500000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:35 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000600000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x2e9}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x12}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000700000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x34) 19:58:36 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030e00000000000000000000000000000006d1000000000000040000000000000000000003800"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r1, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000080)) 19:58:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3, 0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x67, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x3a) 19:58:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x35) [ 1524.061728][T27859] policy_mt_check: 5 callbacks suppressed [ 1524.061735][T27859] xt_policy: too many policy elements 19:58:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000022800000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x36) [ 1524.186954][T27871] xt_policy: too many policy elements 19:58:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000003f00000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000004000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x37) [ 1524.317106][T27877] xt_policy: too many policy elements [ 1524.438770][T27880] xt_policy: too many policy elements 19:58:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x13}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x500}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000009000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x38) 19:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}]}, 0x78) 19:58:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000100)={0x8, @time={0xff, 0x1}, 0x8, {0x5, 0x80}, 0x40, 0x0, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x430201) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000140)={{0x3, 0x1, 0x152, 0x1, 0x944}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCNXCL(r7, 0x540d) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000bdb3861d12eba6c76db700005682dfc8474500003000e5cf8cac2c920200619d0000000002905bac141400ac1414bb11009078"], 0xfdef) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280)='ethtool\x00') r9 = socket$caif_stream(0x25, 0x1, 0x3) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r11}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x27, &(0x7f00000001c0)={@multicast2, @local}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(r12, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) r14 = socket$caif_stream(0x25, 0x1, 0x3) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r16}) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000900)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000a00)=0xe8) r18 = socket$caif_stream(0x25, 0x1, 0x3) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r20}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a40)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r23 = socket$inet6_tcp(0xa, 0x1, 0x0) r24 = dup2(r22, r23) ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200) getsockopt$inet_pktinfo(r24, 0x0, 0x8, &(0x7f0000000a80)={0x0, @initdev, @multicast2}, &(0x7f0000000ac0)=0xc) r26 = socket$caif_stream(0x25, 0x1, 0x3) r27 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r27, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r27, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r28}) r29 = socket$caif_stream(0x25, 0x1, 0x3) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r29, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r31}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x160, r8, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r25}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r28}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r31}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4800}, 0x0) [ 1525.260121][T27992] xt_policy: too many policy elements 19:58:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x600}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x39) 19:58:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000002c000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10218300000000400000000000000000000000000000000000000000003800"/120], 0x78) 19:58:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3a) [ 1525.491241][T28100] xt_policy: too many policy elements 19:58:37 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000000000000000006d10000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000007e800"/120], 0x78) 19:58:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x16}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000003d000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3b) 19:58:38 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x7, 0x404c2) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1b5b083b31000030000000000000000000800080000000006d1000ec32b08dc0b220250000000000000000001e00000000cad636a95eda0ee4b84774b1d3716c030000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aab57424f247"], 0x78) 19:58:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)={@void, @val={0x3}, @ipv6=@udp={0x7, 0x6, "ab473a", 0x145, 0x11, 0x8, @dev={0xfe, 0x80, [], 0x13}, @mcast2, {[@routing={0x3c, 0xc, 0x0, 0x81, 0x0, [@empty, @mcast1, @dev={0xfe, 0x80, [], 0x20}, @mcast1, @remote, @mcast1]}], {0x4e24, 0x4e24, 0xdd, 0x0, [@guehdr={0x2, 0x0, 0x3, 0x0, 0x100}, @guehdr={0x2, 0x1, 0x0, 0x2, 0x0, @val=0x80}, @guehdr={0x1, 0x0, 0x1, 0xb0, 0x0, @void}], "e83de68502094694b9be150502b52670d7238a6b5dabe443ac06631bd66636c4d95fd138742fa332a1a34484db3f29ac76b580f4ecaad7b98f3db88f4fd3f7ea465b162d32646189c2f89f77a7cb1d5f6105bdb221b52e35cae15e740e38b53050ca911aeb191ca9dc5637b70a99df78d441010924a02a58f747a728cf980502082ca07493ef3df7f479c5416d746ddc1fe6a97a1941235a847de408b493ef3a54535c93ba60b258313a6518353edb80d517ac179508016a21756818e6c28d2d44"}}}}, 0x177) 19:58:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x700}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1526.386504][T28125] xt_policy: too many policy elements 19:58:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000003e600000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x900}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3c) [ 1526.549566][T28136] xt_policy: too many policy elements 19:58:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000003e800000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x3, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2, 0x1dd, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x100}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x6) 19:58:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3d) [ 1526.714342][T28147] xt_policy: too many policy elements 19:58:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote={0xac, 0x14, 0x30}}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000ec00000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x3e) 19:58:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xa00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:39 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x91, 0x200007, 0x5, 0x1}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={r1, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) 19:58:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x321901, 0x0) connect$pppoe(r1, &(0x7f0000000380)={0x18, 0x0, {0x0, @remote, 'syz_tun\x00'}}, 0x1e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$pppoe(r4, &(0x7f0000000200)={0x18, 0x0, {0x1, @random="1bced4eee3d6", 'dummy0\x00'}}, 0x1e) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r6, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r8, 0x4010ae74, &(0x7f0000000180)={0x20, 0x1, 0x3}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400201) write$tun(r11, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000000000000900000186dd06100008000016000000fe8000000000000000000000000000bb000000ffffac1e0101"], 0x3e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r12, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup2(r15, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) bind$rds(r17, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x21) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r14, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r18, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x81) [ 1527.721564][T28261] xt_policy: too many policy elements 19:58:39 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000003f000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x41) 19:58:39 executing program 4: 19:58:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000ff00000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:40 executing program 4: 19:58:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x2, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x42) 19:58:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000400000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:40 executing program 4: 19:58:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xe00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$netrom(r4, &(0x7f00000000c0)={{0x3, @default}, [@default, @netrom, @rose, @bcast, @netrom, @null, @netrom]}, &(0x7f0000000180)=0x48, 0x80000) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000001000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:40 executing program 4: 19:58:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x43) 19:58:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000002000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:41 executing program 4: 19:58:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x44) 19:58:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000003000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:42 executing program 4: 19:58:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1100}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x3, 0x8, 0x6}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1530.082329][T28524] policy_mt_check: 5 callbacks suppressed [ 1530.082337][T28524] xt_policy: too many policy elements 19:58:42 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[], 0xce024b8b) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r2 = getuid() r3 = getegid() mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3]) 19:58:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1200}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000004000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x45) [ 1530.310481][T28540] xt_policy: too many policy elements 19:58:42 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000005000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x46) [ 1530.485747][T28549] xt_policy: too many policy elements 19:58:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x12, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000006000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x47) 19:58:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000), 0xffffffffffffff20, 0x0) 19:58:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1531.544904][T28656] xt_policy: too many policy elements 19:58:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1400}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000007000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x48) 19:58:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x49) 19:58:43 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x374) setresuid(0x0, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_test}) [ 1531.791300][T28677] xt_policy: too many policy elements 19:58:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000228000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1532.044296][T28685] xt_policy: too many policy elements 19:58:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x13, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4a) 19:58:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000003f000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') r2 = dup(r0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r2, r1, 0x0, 0x523) 19:58:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1800}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0x3a) 19:58:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4b) [ 1533.334138][T28798] xt_policy: too many policy elements 19:58:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000040000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x3f00}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4c) 19:58:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000090000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1533.498522][T28810] xt_policy: too many policy elements [ 1533.609603][T28814] xt_policy: too many policy elements 19:58:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000002c0000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1533.741409][T28817] xt_policy: too many policy elements 19:58:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x16, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4d) 19:58:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000003d0000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:46 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept$alg(r0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 19:58:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x6000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[0x35322f49, 0x2, 0x6]}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000000000450000300000000000ef7278ac141400ac1414bb1100907804000000450000040000000000000000e0000002ffffffff"], 0xfdef) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x4d0, 0x260, 0x260, 0x260, 0x260, 0x0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xa0, 0x1c8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4, 0x40], 0x1}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x10000, 'system_u:object_r:iptables_exec_t:s0\x00'}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3b}, @empty, 0xffffffff, 0xffffff00, 'macvtap0\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21, 0x1, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}, {{@uncond, 0x0, 0xb0, 0x1d8, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@socket0={{0x20, 'socket\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:chfn_exec_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) 19:58:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4e) 19:58:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xe902}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, &(0x7f0000000300), 0x121, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x4000000000001b9, 0x0) 19:58:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000003e6000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x4f) 19:58:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000003e8000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x30, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x50) 19:58:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000ec000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1535.317396][T28964] policy_mt_check: 3 callbacks suppressed [ 1535.317403][T28964] xt_policy: too many policy elements 19:58:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x51) 19:58:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000003f0000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x34000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x52) 19:58:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/19, 0xfffffe47) 19:58:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$caif_stream(0x25, 0x1, 0x3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', r7}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r7, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000004500003d0000000000029004000000450000040000000000000000e0000002ffffffff"], 0xfdef) 19:58:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x400300}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1536.074000][T29077] xt_policy: too many policy elements 19:58:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x53) [ 1536.134133][ T27] audit: type=1804 audit(1581796728.170:106): pid=29082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir545040767/syzkaller.TuJ8XA/2354/file0/bus" dev="ramfs" ino=163183 res=1 [ 1536.203738][T29083] skbuff: bad partial csum: csum=69/15616 headroom=64 headlen=3712 19:58:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000ff000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:48 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) 19:58:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x54) [ 1536.405214][T29095] xt_policy: too many policy elements 19:58:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141242, 0x0) sendfile(r1, r0, 0x0, 0x401) 19:58:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x55) [ 1536.619887][T29110] xt_policy: too many policy elements 19:58:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000001300)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) [ 1536.834340][T29118] xt_policy: too many policy elements 19:58:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) 19:58:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x56) 19:58:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x404}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000005cc0)={'veth1_to_bond\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=',']}) 19:58:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x2, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000004000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf0ffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:49 executing program 4: removexattr(0x0, &(0x7f0000000180)=@known='system.posix_acl_access\x00') r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;!\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfcc8) 19:58:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x57) 19:58:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x58) 19:58:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000005000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1537.970541][T29238] xt_policy: too many policy elements 19:58:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x59) [ 1538.139456][T29249] xt_policy: too many policy elements 19:58:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000010000000000000180000009000000"], &(0x7f0000000240)=""/191, 0x27, 0xbf, 0x8}, 0x20) r1 = socket$isdn(0x22, 0x3, 0x25) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000180), &(0x7f0000000200)=0x30) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000300)='./file0\x00', 0xc9) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000340)="1d5be7bb1373ce9509f49c56261c5122038bfb6c7c48406f0865a2f4a981c5f924d6dd7ce15b7bc00965cc658279a51c4271a1b72862a68c0ff12a711e9e4b35f93ac1cf7cc294dd090bbd51d26c66339f93abdb24aff8221353bd89926f52befa65459fec6641498a5f0e4ce618ae1722da911a7af443bbda5e1bdf8c2f9db3d71524e3c78d3607556fe0020c"], 0x3f}) ioctl$VIDIOC_ENUMINPUT(r4, 0xc050561a, &(0x7f00000000c0)={0x4, "09cc46240da3d3a6127f3524541d84c983da031fd7b49f72cf024661ed8e5089", 0x2, 0x0, 0x2, 0x800, 0x4, 0x2}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5a) 19:58:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000006000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1538.691942][T29366] xt_policy: too many policy elements [ 1538.768556][T29369] BPF:[1] INT [ 1538.772065][T29369] BPF: [ 1538.774914][T29369] BPF:meta_left:0 meta_needed:4 [ 1538.786463][T29369] BPF: [ 1538.786463][T29369] 19:58:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x3, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:51 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) 19:58:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000007000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5b) [ 1539.051935][T29375] xt_policy: too many policy elements 19:58:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5c) 19:58:51 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1658}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x18) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@initdev, @in6=@empty}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0x7dc7dffd048e8846) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = open(0x0, 0x0, 0x0) fchdir(r3) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) 19:58:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000090000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1539.268994][T29391] xt_policy: too many policy elements 19:58:51 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000200)={0x9, 0xb, 0x4, 0x1, 0x2, {0x77359400}, {0x5, 0x2, 0x3, 0x9, 0x0, 0xbc, "74a70f70"}, 0x83d, 0x4, @fd, 0xfe, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000100)={0x4, 0x7, 0x25, 0x2, 0x8, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000000029078ac14140000000004000000450000240000000000000000e00000396d83b8230011333c2c00"/72], 0x4a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) pidfd_getfd(r7, r4, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r6, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$6lowpan_control(r9, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 19:58:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000ec000000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5d) 19:58:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x4, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:52 executing program 4: syz_open_procfs(0x0, 0xfffffffffffffffd) 19:58:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5e) 19:58:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000028020000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x5f) 19:58:52 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 19:58:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000c0020000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1540.463827][T29524] policy_mt_check: 2 callbacks suppressed [ 1540.463835][T29524] xt_policy: too many policy elements 19:58:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x60) 19:58:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1540.670303][T29531] xt_policy: too many policy elements 19:58:53 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x6, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x5000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') open(&(0x7f0000000200)='./file1\x00', 0x141442, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file1\x00') 19:58:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x61) 19:58:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000d0030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000e6030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1541.357276][T29643] xt_policy: too many policy elements 19:58:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x6000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000e8030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1541.434961][T29651] xt_policy: too many policy elements 19:58:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000f0030000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1541.497107][T29654] xt_policy: too many policy elements [ 1541.628117][T29660] xt_policy: too many policy elements 19:58:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f00000000c0)={{0x5, 0x0, @reserved="9d2b74a5b5d89c643229b60d1ecd47a19da2f6264b59d94419e5dcc7b44abac0"}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x62) 19:58:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') lseek(r0, 0xbdc, 0x0) 19:58:54 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x7, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000050000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x7000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x63) 19:58:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 19:58:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x81, 0x105002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x100}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) [ 1542.513048][T29782] xt_policy: too many policy elements 19:58:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x64) 19:58:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0}) 19:58:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000060000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1542.733670][T29798] xt_policy: too many policy elements 19:58:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000070000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x65) [ 1542.902295][T29905] xt_policy: too many policy elements 19:58:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x8, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') sendfile(r3, r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) sendfile(r7, r5, 0x0, 0x9) 19:58:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002280000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x66) 19:58:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0xffffffff, 0x4, [], &(0x7f0000000380)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r8) dup2(r5, r7) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000180)={0x0, @pix_mp={0x200, 0x1, 0x44495658, 0x4, 0xa, [{0x0, 0x3}, {0x7, 0x7}, {0x7fff, 0x8}, {0xa090, 0x10000}, {0x5, 0xee4}, {0x9, 0x401}, {0x40, 0xbd67}, {0xd, 0x5ce5fa4a}], 0x9, 0x8, 0x6}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000406050000000000090900020073797a30000000000900020073797a31000000000500010007000000e911b568355f2de105000100070000000500010007000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc041}, 0x40000) 19:58:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1543.654250][T29924] xt_policy: too many policy elements [ 1543.682391][T29925] [ 1543.685012][T29925] ====================================================== [ 1543.692032][T29925] WARNING: possible circular locking dependency detected [ 1543.699058][T29925] 5.6.0-rc1-next-20200214-syzkaller #0 Not tainted [ 1543.705557][T29925] ------------------------------------------------------ [ 1543.712566][T29925] syz-executor.4/29925 is trying to acquire lock: [ 1543.718970][T29925] ffff8880459f5150 (&sig->cred_guard_mutex){+.+.}, at: lock_trace+0x4a/0xe0 [ 1543.727729][T29925] [ 1543.727729][T29925] but task is already holding lock: [ 1543.735097][T29925] ffff8880a870dac0 (&p->lock){+.+.}, at: seq_read+0x71/0x1170 [ 1543.742585][T29925] [ 1543.742585][T29925] which lock already depends on the new lock. [ 1543.742585][T29925] 19:58:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xa000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x67) 19:58:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000003f0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1543.752995][T29925] [ 1543.752995][T29925] the existing dependency chain (in reverse order) is: [ 1543.762011][T29925] [ 1543.762011][T29925] -> #3 (&p->lock){+.+.}: [ 1543.768557][T29925] __mutex_lock+0x156/0x13c0 [ 1543.773674][T29925] mutex_lock_nested+0x16/0x20 [ 1543.778969][T29925] seq_read+0x71/0x1170 [ 1543.783684][T29925] do_iter_read+0x4a4/0x660 [ 1543.788710][T29925] vfs_readv+0xf0/0x160 19:58:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000400000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1543.793480][T29925] default_file_splice_read+0x4fb/0xa20 [ 1543.793496][T29925] do_splice_to+0x127/0x180 [ 1543.793511][T29925] splice_direct_to_actor+0x320/0xa30 [ 1543.793525][T29925] do_splice_direct+0x1da/0x2a0 [ 1543.793536][T29925] do_sendfile+0x597/0xd00 [ 1543.793548][T29925] __x64_sys_sendfile64+0x1dd/0x220 [ 1543.793564][T29925] do_syscall_64+0xfa/0x790 19:58:55 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000900000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1543.793581][T29925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.793586][T29925] [ 1543.793586][T29925] -> #2 (sb_writers#3){.+.+}: [ 1543.793612][T29925] __sb_start_write+0x255/0x4a0 [ 1543.793625][T29925] mnt_want_write+0x3f/0xc0 [ 1543.793671][T29925] ovl_want_write+0x76/0xa0 [ 1543.793712][T29925] ovl_create_object+0xb3/0x2c0 [ 1543.793724][T29925] ovl_create+0x28/0x30 [ 1543.793737][T29925] lookup_open+0x12d5/0x1a90 19:58:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000002c00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1543.793750][T29925] path_openat+0xf2c/0x33f0 [ 1543.793763][T29925] do_filp_open+0x192/0x260 [ 1543.793776][T29925] do_sys_openat2+0x5eb/0x7e0 [ 1543.793790][T29925] do_sys_open+0xf2/0x180 [ 1543.793802][T29925] __x64_sys_creat+0x61/0x80 [ 1543.793816][T29925] do_syscall_64+0xfa/0x790 [ 1543.793831][T29925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.793835][T29925] [ 1543.793835][T29925] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}: [ 1543.793856][T29925] down_read+0x95/0x440 [ 1543.793869][T29925] path_openat+0x1c4f/0x33f0 [ 1543.793882][T29925] do_filp_open+0x192/0x260 [ 1543.793897][T29925] do_open_execat+0x13b/0x6d0 [ 1543.793908][T29925] __do_execve_file.isra.0+0x16d5/0x2270 [ 1543.793919][T29925] __x64_sys_execve+0x8f/0xc0 [ 1543.793934][T29925] do_syscall_64+0xfa/0x790 [ 1543.793949][T29925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.793952][T29925] [ 1543.793952][T29925] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 1543.793975][T29925] __lock_acquire+0x29cd/0x6320 [ 1543.793986][T29925] lock_acquire+0x190/0x410 [ 1543.793997][T29925] __mutex_lock+0x156/0x13c0 [ 1543.794010][T29925] mutex_lock_killable_nested+0x16/0x20 [ 1543.794020][T29925] lock_trace+0x4a/0xe0 [ 1543.794031][T29925] proc_pid_stack+0xbf/0x200 [ 1543.794041][T29925] proc_single_show+0xfd/0x1c0 [ 1543.794054][T29925] seq_read+0x4ca/0x1170 [ 1543.794067][T29925] do_iter_read+0x4a4/0x660 [ 1543.794077][T29925] vfs_readv+0xf0/0x160 [ 1543.794091][T29925] default_file_splice_read+0x4fb/0xa20 [ 1543.794103][T29925] do_splice_to+0x127/0x180 [ 1543.794117][T29925] splice_direct_to_actor+0x320/0xa30 [ 1543.794130][T29925] do_splice_direct+0x1da/0x2a0 [ 1543.794140][T29925] do_sendfile+0x597/0xd00 [ 1543.794152][T29925] __x64_sys_sendfile64+0x1dd/0x220 [ 1543.794165][T29925] do_syscall_64+0xfa/0x790 [ 1543.794180][T29925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.794184][T29925] [ 1543.794184][T29925] other info that might help us debug this: [ 1543.794184][T29925] [ 1543.794187][T29925] Chain exists of: [ 1543.794187][T29925] &sig->cred_guard_mutex --> sb_writers#3 --> &p->lock [ 1543.794187][T29925] [ 1543.794205][T29925] Possible unsafe locking scenario: [ 1543.794205][T29925] [ 1543.794209][T29925] CPU0 CPU1 [ 1543.794212][T29925] ---- ---- [ 1543.794214][T29925] lock(&p->lock); [ 1543.794221][T29925] lock(sb_writers#3); [ 1543.794230][T29925] lock(&p->lock); [ 1543.794236][T29925] lock(&sig->cred_guard_mutex); [ 1543.794244][T29925] [ 1543.794244][T29925] *** DEADLOCK *** [ 1543.794244][T29925] [ 1543.794252][T29925] 1 lock held by syz-executor.4/29925: [ 1543.794256][T29925] #0: ffff8880a870dac0 (&p->lock){+.+.}, at: seq_read+0x71/0x1170 [ 1543.794281][T29925] [ 1543.794281][T29925] stack backtrace: [ 1543.794303][T29925] CPU: 0 PID: 29925 Comm: syz-executor.4 Not tainted 5.6.0-rc1-next-20200214-syzkaller #0 [ 1543.794311][T29925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1543.794315][T29925] Call Trace: [ 1543.794334][T29925] dump_stack+0x197/0x210 [ 1543.794353][T29925] print_circular_bug.isra.0.cold+0x163/0x172 [ 1543.794368][T29925] check_noncircular+0x32e/0x3e0 [ 1543.794383][T29925] ? print_circular_bug.isra.0+0x230/0x230 [ 1543.794399][T29925] ? __kasan_check_read+0x11/0x20 [ 1543.794411][T29925] ? mark_lock+0xc2/0x1220 [ 1543.794428][T29925] ? alloc_list_entry+0xc0/0xc0 [ 1543.794440][T29925] ? mark_lock+0xc2/0x1220 [ 1543.794457][T29925] ? stack_depot_save+0x25a/0x450 [ 1543.794474][T29925] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1543.794489][T29925] ? find_first_zero_bit+0x9a/0xc0 [ 1543.794504][T29925] __lock_acquire+0x29cd/0x6320 [ 1543.794527][T29925] ? mark_held_locks+0xf0/0xf0 [ 1543.794545][T29925] lock_acquire+0x190/0x410 [ 1543.794557][T29925] ? lock_trace+0x4a/0xe0 [ 1543.794574][T29925] __mutex_lock+0x156/0x13c0 [ 1543.794585][T29925] ? lock_trace+0x4a/0xe0 [ 1543.794598][T29925] ? lock_trace+0x4a/0xe0 [ 1543.794612][T29925] ? __kasan_check_read+0x11/0x20 [ 1543.794627][T29925] ? mutex_trylock+0x2d0/0x2d0 [ 1543.794680][T29925] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 1543.794694][T29925] ? proc_pid_stack+0xa4/0x200 [ 1543.794708][T29925] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1543.794724][T29925] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1543.794740][T29925] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1543.794760][T29925] mutex_lock_killable_nested+0x16/0x20 [ 1543.794775][T29925] ? mutex_lock_killable_nested+0x16/0x20 [ 1543.794786][T29925] lock_trace+0x4a/0xe0 [ 1543.794799][T29925] proc_pid_stack+0xbf/0x200 [ 1543.794814][T29925] proc_single_show+0xfd/0x1c0 [ 1543.794830][T29925] seq_read+0x4ca/0x1170 [ 1543.794855][T29925] do_iter_read+0x4a4/0x660 [ 1543.794867][T29925] ? dup_iter+0x260/0x260 [ 1543.794884][T29925] vfs_readv+0xf0/0x160 [ 1543.794899][T29925] ? compat_rw_copy_check_uvector+0x4c0/0x4c0 19:58:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x14, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003d00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='auxv\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') sendfile(r3, r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='stack\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r6) sendfile(r7, r5, 0x0, 0x9) 19:58:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1543.794913][T29925] ? push_pipe+0x3e2/0x6a0 [ 1543.794931][T29925] ? iov_iter_get_pages_alloc+0x3a5/0x15b0 [ 1543.794950][T29925] ? iov_iter_for_each_range+0x7d0/0x7d0 [ 1543.794967][T29925] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1543.794987][T29925] default_file_splice_read+0x4fb/0xa20 [ 1543.795001][T29925] ? aa_file_perm+0x601/0x1600 [ 1543.795023][T29925] ? iter_file_splice_write+0xc10/0xc10 [ 1543.795037][T29925] ? lock_downgrade+0x920/0x920 [ 1543.795050][T29925] ? rcu_read_lock_held+0x9c/0xb0 [ 1543.795070][T29925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1543.795113][T29925] ? fsnotify+0x7fd/0xbb0 [ 1543.795132][T29925] ? fsnotify_first_mark+0x210/0x210 [ 1543.795144][T29925] ? rcu_read_lock_held+0x9c/0xb0 [ 1543.795159][T29925] ? __kasan_check_read+0x11/0x20 [ 1543.795178][T29925] ? security_file_permission+0x8f/0x380 [ 1543.795197][T29925] ? rw_verify_area+0x126/0x360 [ 1543.795213][T29925] ? iter_file_splice_write+0xc10/0xc10 [ 1543.795229][T29925] do_splice_to+0x127/0x180 [ 1543.795248][T29925] splice_direct_to_actor+0x320/0xa30 [ 1543.795266][T29925] ? generic_pipe_buf_nosteal+0x10/0x10 [ 1543.795285][T29925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1543.795306][T29925] ? do_splice_to+0x180/0x180 [ 1543.795322][T29925] ? rw_verify_area+0x126/0x360 [ 1543.795337][T29925] do_splice_direct+0x1da/0x2a0 [ 1543.795352][T29925] ? splice_direct_to_actor+0xa30/0xa30 [ 1543.795370][T29925] ? rw_verify_area+0x126/0x360 [ 1543.795382][T29925] do_sendfile+0x597/0xd00 [ 1543.795400][T29925] ? do_compat_pwritev64+0x1c0/0x1c0 19:58:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000000c0)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}, "deaaf029e7c169aa"}}}}, 0x42) 19:58:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xe000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003e60000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1543.795414][T29925] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1543.795428][T29925] ? put_timespec64+0xda/0x140 [ 1543.795473][T29925] ? __x64_sys_futex+0x404/0x590 [ 1543.795487][T29925] __x64_sys_sendfile64+0x1dd/0x220 [ 1543.795498][T29925] ? __ia32_sys_sendfile+0x230/0x230 [ 1543.795509][T29925] ? do_syscall_64+0x26/0x790 [ 1543.795519][T29925] ? lockdep_hardirqs_on+0x421/0x5e0 [ 1543.795562][T29925] ? trace_hardirqs_on+0x67/0x240 [ 1543.795576][T29925] do_syscall_64+0xfa/0x790 [ 1543.795592][T29925] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1543.795600][T29925] RIP: 0033:0x45c6c9 [ 1543.795611][T29925] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1543.795616][T29925] RSP: 002b:00007f99b1ce2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1543.795626][T29925] RAX: ffffffffffffffda RBX: 00007f99b1ce36d4 RCX: 000000000045c6c9 19:58:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x68) 19:58:56 executing program 4: msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x15a) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) socket$inet(0x2, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xa3) setsockopt$inet_mreqn(r1, 0x0, 0x5, 0x0, 0x0) open(0x0, 0x0, 0x100) write(0xffffffffffffffff, 0x0, 0x0) 19:58:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003e80000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1543.795632][T29925] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000b [ 1543.795637][T29925] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1543.795643][T29925] R10: 0000000000000009 R11: 0000000000000246 R12: 00000000ffffffff [ 1543.795649][T29925] R13: 00000000000008cb R14: 00000000004cb58f R15: 000000000076bf2c 19:58:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000ec0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x90, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x69) 19:58:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000003f00000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002480)={@val={0x0, 0x88f5}, @val={0x0, 0x1, 0x3ff, 0x3ff, 0x4, 0x200}, @mpls={[], @ipv4=@tipc={{0x6, 0x4, 0x1, 0x1b, 0x44, 0x65, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr, {[@end, @noop]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x1, 0x0, 0xa, 0x2, 0x2, 0x11, 0x0, 0x2, 0x3, 0x0, 0x2, 0x8, 0x7, 0x2, 0x4e23, 0x4e24}, 0x0, 0x3}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0x52) 19:58:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400}, 0x14) 19:58:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x11000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000ff0000000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6a) 19:58:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) write$tun(r0, &(0x7f00000000c0)={@void, @val, @ipv6=@dccp_packet={0x0, 0x6, "0e724b", 0x18, 0x2f, 0x0, @empty, @mcast2, {[@fragment={0x33}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "8f7cee", 0x0, "3fb7ae"}}}}}, 0x4a) 19:58:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x12000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:57 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000400000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1545.509948][T30206] policy_mt_check: 9 callbacks suppressed [ 1545.509957][T30206] xt_policy: too many policy elements [ 1545.644242][T30219] xt_policy: too many policy elements 19:58:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0xff, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6b) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000001000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x13000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) [ 1545.976169][T30328] xt_policy: too many policy elements 19:58:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x1c) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03200000000000000000450000300000000000009078ac141400ac1414bb1100907804000000450000040000000000000060914b0302ffffffff"], 0xfdef) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000002000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6c) 19:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x14000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6d) [ 1546.138461][T30340] xt_policy: too many policy elements 19:58:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x18000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000003000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1546.301295][T30357] xt_policy: too many policy elements 19:58:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x6, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6e) 19:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x3f000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000004000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:58 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:58:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8c082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x420000015001}) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x901028c0}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x78, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'syzkaller1\x00'}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, 'posix_acl_access\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1f}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x23}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000014}, 0x4840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r4, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r8, 0x80044948, &(0x7f0000000580)=0xdd73) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r7, 0x1c, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x7fffffff}}}, 0xa0) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ocfs2_control\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000500)={0x12, 0x10, 0xfa00, {&(0x7f0000000480), r7, r10}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0xdc, r11, 0x8, 0x7fffffff, 0x80000001, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf5}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x98}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x34}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x78a}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8081}, 0x24000880) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000001c030000000000ff0f00004500003000000000030220008985b8b15c2b872461e31a7b105fa7ac141412010020451400040065000000000400e01a000002ffffffffc2cb2609fee2f8d0dc4f9b0937f142"], 0x3e) [ 1546.660228][T30508] xt_policy: too many policy elements 19:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x60000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000005000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x6f) 19:58:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000006000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x70) [ 1546.831255][T30624] xt_policy: too many policy elements 19:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x71) [ 1546.900190][T30636] xt_policy: too many policy elements 19:58:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x8, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:58:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000007000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:58:59 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000000000000ffff450000300000000000029078ac141400ac1414bb1100905f04000000450000080000000000000000e0000002ffffffff"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x210401, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000280)=[0x4], 0x2) 19:58:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x80010000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x72) 19:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x73) 19:58:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000228000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1547.395980][T30655] xt_policy: too many policy elements 19:58:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x74) 19:58:59 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="7261770000000000000000000000000000003f000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 1547.520429][T30770] xt_policy: too many policy elements 19:58:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x9effffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:58:59 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:59:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x10, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000040000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x75) 19:59:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xe9020000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:00 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0x65a0}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:59:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r2 = socket$inet(0x2, 0x3, 0xa0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) accept(r2, &(0x7f00000000c0)=@isdn, &(0x7f0000000180)=0x80) 19:59:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x76) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000090000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000002c0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x77) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003d0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x20000078) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003e6000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xfffff000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:00 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x109002, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0xfff, 0x0, 0x0, 0x3bb0, 0x2, 0x1559, 0x1d, r4}, &(0x7f0000000100)=0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r5, &(0x7f0000000180)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3f, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}, "b456bcc72094cdf3"}}}}, 0x42) 19:59:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffff7f}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:00 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:59:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003e8000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000ec000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:59:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000003f0000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffff9e}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x2, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:59:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="726177000000000000000000000000000000ff000000000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:01 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:59:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xfffffff0}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000000004500278bf838538f940016f363ca00300000000000029078ac141400ac1414bb11009078040000004500000400000000"], 0xfdef) 19:59:01 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) getpgid(r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x78) 19:59:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000004000000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x1b, 0x5b, 0x8, 0x3b, 0x31, 0x30, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x106d, 0x40}, [{}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000060c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000006100)={0x25, "710b39eb90bfab55bab54aa6b6f700e8de0697be116fd384204d70001889c23f4d95183c97b3aff8c45f92555ea394fc7f2feab243230e9a46c8694b0dabe2e2dc8998f7d5be159cb258c3e57f3b738746d784dc2aee1f8b4efdbbe853d342c888c536081f8c0a747e2ea3e54048e9924ee5508d46ecb9bc44908617b8492c8e"}) 19:59:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000010000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000020000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:59:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x14, 0x0, 0x0, 0x4, 0x3, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) 19:59:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000030000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000006970366772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f001280200000000000000000000000000000000000000005801706f6c6963790000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000e4ffffff00000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000200050000000000280074746c00000000000000000000000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000ac1414aaac1414aa0000000000000000766c616e3000000000000000000000006e7230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 19:59:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x40030000000000}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(des3_ede)\x00'}}}]}, 0x138}}, 0x0) 19:59:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x401) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b5b083b313000300000000000000000000000007f0000006d1000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000008a0f69ec77633cf5948f2be06dda1342fe4ab67d9d9a18"], 0x78) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x141000, 0x0) recvfrom$ax25(r2, &(0x7f0000000180)=""/86, 0x56, 0x40, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 19:59:02 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525c7502796da36d6c42aeb63242717d3f3854e69250de595d34e15db5f9e0fd0f5048ec4e53401d04af8faf6098103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5d443406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50810000002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) 19:59:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r1, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000100)) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f00000000c0)={0x5e68, "4d980ab14405a7344dd6b14229429e07fc166d0ea5fd5bfa08b8ccfad0c86e56", 0x1}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000000000)={@void, @val={0x3}, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @dev, @remote}, @time_exceeded={0x11, 0x0, 0x0, 0x4, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast}}}}}, 0xfdef) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x280c00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r9, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01120000000000000000090000003c00030014000600ff0900000020000000000000000000010800030000000000140002007663616e3000000000000000000000000800010002000000"], 0x50}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r13, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x91c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdc84}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc000}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in=@multicast2}}, {{@in=@multicast1}}}, &(0x7f0000000300)=0xe8) 19:59:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000040000000000000000000200000003000000580300002802000028020000280200002802000000000000c0020000c0020000c0020000c0020000c002000003000000000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000697036677265300000000000000000000000000000000000000000000000000000000000000000000000000000