0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', 0x0, 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:06 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) [ 943.753661] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 943.826315] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000000)={0x5, 0xffff, 0x4, 0x7f, 0x3, 0x13, 0x1c, "d5df96a875afd95eba6143bff4a4f8b457c4aa2a", "44b5cc027e8bff9557c1a5b58f020c8b7db90e90"}) 17:15:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', 0x0, 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:06 executing program 3: socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000340)=""/4096) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x101800) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xa7, 0x40500) dup2(r2, r4) 17:15:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, 0x0, 0x0) 17:15:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:06 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) [ 944.023261] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x47, &(0x7f0000000340)={&(0x7f0000000040)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) 17:15:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 944.113106] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 944.153658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:06 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x2c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004086}, 0x24010000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000017c0)={0xf000000, 0xffffffff, 0x868d, r1, 0x0, &(0x7f0000001780)={0x9c090b, 0x1, [], @p_u16=&(0x7f0000001740)=0x7fff}}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xac, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x4028000) 17:15:06 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="812845a4fdc5d0d2e08cfcf723b159aaa36f1ee65b12c4a9883b3859a468d2619fb9f2576019bc91574d"], 0x1c}}, 0x0) [ 944.218029] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 944.280761] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:07 executing program 2 (fault-call:4 fault-nth:0): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) 17:15:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:07 executing program 0 (fault-call:18 fault-nth:0): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:07 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) 17:15:07 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = dup(r0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000000)=0x3) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r4 = dup(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x1}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4) dup2(r3, r0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086604, 0x40000000b07101) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x24) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000340)={r9}, 0x8) 17:15:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 944.896028] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 17:15:07 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)='\b', 0x1, 0xfffffffffffffff8) keyctl$search(0xa, r2, &(0x7f0000000440)='encrypted\x00', &(0x7f0000000380)={'syz', 0x3}, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="c18f00f5ff00008000006b000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40014) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = syz_open_procfs(r7, &(0x7f0000000000)='fd/3\x00') dup3(r6, r8, 0x0) 17:15:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 944.967848] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:07 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000140)) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000100)) r3 = getpid() r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x119071) r5 = syz_open_procfs(r3, &(0x7f00000000c0)='net/sctp\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)=0x14) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x109000, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000200)={0x1ff, 0x6, 0x9, 0xfffffffd, 0x1}) 17:15:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {0x0, 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 945.063302] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:07 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {0x0, 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 945.146644] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:07 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x15, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x5, r2, 0x2, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0xffffffffffffff5b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:07 executing program 3: socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xf, 0x1, {{0x20, 0x0, 0x7}}}, 0x18) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) dup2(r2, r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x60}}, 0x0) [ 945.230826] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 945.294518] xt_nfacct: accounting object with name `syz1' does not exists [ 945.340638] xt_nfacct: accounting object with name `syz1' does not exists 17:15:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) timer_create(0x1, &(0x7f0000066000)={0x0, 0x23}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r2+10000000}, &(0x7f0000000340), 0x8) 17:15:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {0x0, 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:08 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) 17:15:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0xffffffffffffff5b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',fsuuid=\x00\x00\x00\x00\x00\x00\x00\x00-\x00\x00\x00\x00-\x00\x00\x00\x00-\x00\x00\x00\x00-\x00\x00\x00\x00\x00\x00\x00\x00,obj_type=,uid=', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYRESDEC=0x0, @ANYBLOB=',mask-^MAY_WRITE,euid=', @ANYRESDEC=0x0, @ANYBLOB=',smackfshat=,uid<', @ANYRESDEC=0x0, @ANYBLOB=',audit,smackfsroot=fd/3\x00,\x00']) 17:15:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r2, 0xc91add0bf88807dd, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000001680)={0x8c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc0001}, 0x240040d1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000130a05000000000000000000000000020c00064020000000000000045285fd8401f8eea190ddad22a50a963677bad433c360f4ca2aee3056c009686f13ceef83b3f53ccd50ab2d32156e93aea9d4a39afc63cfc732372047b15d5b7b60"], 0x20}}, 0x0) 17:15:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0xffffffffffffff5b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000408010800000000000000000a0000070c00048008000140000000040600024088b500000c0004800800064000008001050003002f02000000705ce0c935e8"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) [ 945.655122] xt_nfacct: accounting object with name `syz1' does not exists [ 945.655605] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev, @initdev}, &(0x7f0000000280)=0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x20000000, &(0x7f0000000100)) socket$phonet(0x23, 0x2, 0x1) sendto$rose(r0, &(0x7f00000001c0)="e71a7a493f19e934002497b418ec705a6f0235a00464033581e90a96a699a27d7faf1a668e74f88873c96a1a0ab0bc1f7907f19bbde03916011d70493c6c6b5d8c12366c02c4ab4088e521fa51b8d8d80a0e4094b6e7663a8880e5ae8e47a36f0cf9da685685b49737657c4eea0da76595d37ecc3a972aae87e2fe3e9bcce710e5fdac3eca177ea0d70b222190da66a34477dbc7dd32230fdc4b09e6e137110976c59842bb04307ce2113d58daaa9f23f1d00d2c6240c09834502589c3210b27cc8f2b", 0xc3, 0x40, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default]}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x54000, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r1 = socket$isdn(0x22, 0x3, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup2(r1, r2) 17:15:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680), 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 945.759215] xt_nfacct: accounting object with name `syz1' does not exists 17:15:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @remote, 0xc7}, @in6={0xa, 0x4e23, 0xfffffffd, @remote, 0x8}, @in6={0xa, 0x4e21, 0x10001, @private1={0xfc, 0x1, [], 0x1}, 0x9}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x26}, 0xffffffb3}, @in6={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x3c}, 0x6}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, @in={0x2, 0x4e20, @multicast2}], 0xcc) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000040)={0x3ff, 0x5000}) [ 945.805163] xt_nfacct: accounting object with name `syz1' does not exists 17:15:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680), 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x1, 0x2) dup3(0xffffffffffffffff, r1, 0x0) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32]}}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 945.877383] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:08 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r2, r0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0x4288, 0x3ff}}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="77adeb686d085746f69401e65ea15b8a", 0x10) 17:15:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680), 0x0, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 945.995701] xt_nfacct: accounting object with name `syz1' does not exists [ 946.019558] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:08 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e92", 0x20, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:08 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f0000000080)=0x5) dup2(r2, r0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x20142, 0x0) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000000)=@bcast) 17:15:08 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x310, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x240, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@unspec=@nfacct={{0x48, 'nfacct\x00'}, {'syz1\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) getsockname(r2, &(0x7f0000001f00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000005c0)=0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000001f80)=0xc) setresuid(0x0, r3, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000040)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x224200a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [0x0, 0x0, 0x32], 0x2d, [], 0x2d, [0x37, 0x0, 0x0, 0x48]}}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid', 0x3d, r3}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) process_vm_writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/14, 0xe}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000180)=""/36, 0x24}], 0x4, &(0x7f0000001e80)=[{&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f0000001c80)=""/248, 0xf8}, {&(0x7f0000000300)=""/187, 0xbb}, {&(0x7f0000000740)=""/178, 0xb2}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/15, 0xf}, {&(0x7f0000001d80)=""/205, 0xcd}], 0x8, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) sendfile(r4, r5, &(0x7f0000000000)=0x7fffffff, 0x5) [ 946.111978] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = open(&(0x7f0000000300)='./file0\x00', 0x5200, 0x100) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r6, @in={{0x2, 0x4e24, @broadcast}}, [0x9, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r8, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r8, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82e, 0x3, 0xff, 0x5, 0x1ff, 0x9b, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) sendmsg$inet_sctp(r4, &(0x7f00000029c0)={&(0x7f00000003c0)=@in6={0xa, 0x4e22, 0x1, @empty, 0x3}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="4aa3580ba81aa6112d1b4031739b39714f4d32c3c8c0770e0cdfdadca5f9a3245fad1c2807f218ccf0917b5b8c701c48c93fbaf62a687768fe73092f6064c0802f10c34ca24865147d6d", 0x4a}, {&(0x7f0000001480)="0d714ba700c77f0e1853f312a74085244710c96dfeb92b638c2eb52f7301a475000d82e87dfdef9ecfeb1f93c98a5cde73bd83d0cab47841fc1a2c15829c000406a9d0d6897c21cc716fd0ca077ea86e20edf387645885a66d8fb0a21cf6c69c7a", 0x61}, {&(0x7f0000001500)="ef90baf603f329a2aa69de082241e9a1362d9a4dda7e66f2f031592c1416b9c50dde4e942d239ef616de897a5845df9b265b5a2f9fa63be38e69c8182f2ce4e56f9a2a5b16e921c247a0c175ae4c2afd95e998d3f94f233dba06e4868bd2502ae69a18f7734bff81e1e9525041a360edcb6f494c931df17c327d5f6a9326a9190afc8dfd161a2824381a6a58f23d6babb604ae97bd4de217eb731a12ecd3873de5de3739799d8ec011442a4ea7992b93a9b11c665dbf31a26ef797e64207e16e3a0e5fa8842928dc263035a9b4244f0db7706f9302af787d96b700", 0xdb}, {&(0x7f0000001600)="b221a333075b950c8d8dc0976e8a0a9734c12bfa43dab5f09f7d5e871331ee8f872a74f0310601768f8178f8c4ea55e42f56d1f90fe588942c49715bd62d11", 0x3f}, {&(0x7f0000001640)="7f3f3ba8d9e1e445f65693e597f03b5671e991f9b5760cfd90196336a9184a070d19dc55c2dced0b249b2f28075d3fc9ce8e25a27de1081f9c7cdb91bb499b8551a64cbfcfe86e0e90d25a7b9e8cf0de4af1bb0e478c211cad46d118cb30bd5d2917f77a6fa03f3425cd92448222021fc0b69c35275e68b3ab960165148df01b9d41209e521037efce881d6789361e2b95f08752df8bcaa90143b8c58719e979c56d7adddd6bcb107d4a9c908a67668f8b621651c0501ab95881bca6c6fcee8ec7ae9bd70b6aaeec87c618652e38", 0xce}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="14bcfd27301b9a26588e23923775bd3f207188acea42218be453721fef14a25e8429651e70c1f7117fac4f3c99856156b0fffd81efa66b0c5b5de13a2ff78e9941ff09aa0a777646459743ca937b3cab0bfb7ad97bc48160d2ac26abd5146d1d76084362aa7231137b8fb59734289cec7de4b8c5cb3192b4fe89f844f6644883348ef1beb3407cb8c4e28f70f2baa12d75c12d2b8ef78988f9693d62d26b99d9c4c1c2532758329aa60cbe693912accd97ebabd91db038ff750d5232f6136791acfcc5986221da72ede45b17dfcf55ea1aff96723fd36344bf80172aa9d27699ea", 0xe1}], 0x8, &(0x7f0000002a40)=ANY=[@ANYBLOB="180000000000000084000000000000000900ff030700060020000000000000008400000008000000fe80000000000000000000000000000f300000000000000084000000010000000600ff0301820000200000000400000000000000ffffffff00000080", @ANYRES32=r6, @ANYBLOB="18000000000000008400000006000000020000000000000020000000000000008400000008000000200100000000000000000000000000022000000000000000840000000200000007000080ffffff7f00006003", @ANYRES32=r8, @ANYBLOB="180000000000000084000000070000007f0000010000000047324e27c2b40b4540dc8979750a69927ed50f71370fa5873ab9a17de0cdef365a0bfc86f234005f4d7ee36433be6895a07fa90606a3846e1cfa08bbd224f53b6e26c35f2a7f41babfc93dc870a6ec1857415a348e606ead2491581bd1c09de28b89cae533011d71d1d62773b37f80dcc3b7cd467fe497c673856e"], 0xd8, 0x24000080}, 0x4800) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0xa0140, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f00000002c0)={0x3, 0x1ff800, 0x1ff}, 0xc) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {r3, 0x7, "951816", "c22386dbb9284020cf8b78b62652b8342001dfc0e5dcdd48f8cbaed3e95834c271a850d6a32fea11ed3c96fa3911bb1160f0ef4fd4deabf456e72a4f0df64d044989f36ef499aab734e440c1d12df17166c3ff6895682305df561a77317212887ce5c32f0095e7dad0f3e6ed752e8217f3ecd351abeb5752b1913e56698cafa3406c1d02d3bc51f2d2773be428b6db639ced896728e3cbe878d4c1c7b19da4f54ed28dc0fafd1393cec06fea11cabbd6e3b6e32c209e56695d56840eb0e354c476b5739f55187ab635d9a8e9408cda0908ac7dfa7788ba4bb52d8ce86e3f600da65788f16e1a61179db39f3050b92026443ca77374e37b3ab611a635f7dd82eb"}}, 0x110) [ 946.223991] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 946.268457] xt_nfacct: accounting object with name `syz1' does not exists [ 946.335942] print_req_error: I/O error, dev loop5, sector 0 17:15:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="18b313bc6a4635e746d013436492cac1445c83f09df20165b10b2e7ef7249022ddaa353bc6457471c119a91b3c84d811985863fa3af5c5e7d67f2202263dbbece786114fb8231d144646cb2eaddd73c36ad1749635e79a22e479fe67772cd1ae726a05573d3a1e01cd23624eb86ba29c022a66fc", 0x74) 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e92", 0x20, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:09 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @fixed={[], 0x12}, 0x4}, 0xa) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r2, r0) 17:15:09 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000000009374, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x8}, 0x4) getresgid(&(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x40041, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000240), 0x4) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1}, {}, {0x0, 0x0, 0x74e}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@broadcast}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="03e20085fb3a1dd8a305719794cec79df78d5c01cbd1ba6f6aa5a38209dcd22eb27fc70507aad63d1af7004d7b00aa51a87fd4868a9f8c4700afcf17c55b846c895365a302b7ee5c854b46339d7dd2d8ee01cf874c0133c56dbcfda950395b86514ead068ea01e9c828871df1dd22c8114ae13bfce93116b6e96b3871369753468b9f78241a8b098ae2e55cab632e58a798ab3050df5c03d8b56c81e047eb13d979b9b4dfff8a4002105eeea78df5667"]) 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e92", 0x20, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 946.542126] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 946.638612] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0xdffffffc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000480)="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", &(0x7f0000000280)="f3d59716e4c5ac1884ee33499d7a020ac2a34664fd525a55858c8c0b185c199bf13ddf9e06c02fe4122ea1fce2145c890e41fe240177fa3b5713220510fb0659e98f86fe337a520207f6ae8637b5f3dd33491329a9512d2e44"}}, &(0x7f00009b1ffc)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd117", 0x30, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 946.690245] audit: type=1804 audit(1591809309.388:56): pid=25380 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir187655332/syzkaller.2wMx7F/2057/bus" dev="sda1" ino=16096 res=1 17:15:09 executing program 5: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000000009374, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x8}, 0x4) getresgid(&(0x7f0000000000), 0x0, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) read(r2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x1ff) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) r4 = openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x40041, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000240), 0x4) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1}, {}, {0x0, 0x0, 0x74e}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@broadcast}, 0x0, @in=@empty, 0x0, 0x0, 0x2}}, 0xe8) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="03e20085fb3a1dd8a305719794cec79df78d5c01cbd1ba6f6aa5a38209dcd22eb27fc70507aad63d1af7004d7b00aa51a87fd4868a9f8c4700afcf17c55b846c895365a302b7ee5c854b46339d7dd2d8ee01cf874c0133c56dbcfda950395b86514ead068ea01e9c828871df1dd22c8114ae13bfce93116b6e96b3871369753468b9f78241a8b098ae2e55cab632e58a798ab3050df5c03d8b56c81e047eb13d979b9b4dfff8a4002105eeea78df5667"]) 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd117", 0x30, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:09 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r2, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x43c, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_EXPR={0x2c0, 0x11, 0x0, 0x1, @immediate={{0xe, 0x1, 'immediate\x00'}, @val={0x2ac, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x2a0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x34, 0x1, "9984fc2f251d6e36a9bf2576fb26928b55a4150977035566311e1159a1a779d77e5c7f564bd7b00e1d5e19e0e197f1a9"}, @NFTA_DATA_VALUE={0x5a, 0x1, "e8ad464fb1d85f58fbaa23477809afae0c1c4af09725cdf05b1850e7db1ef59afbe1e738143617383b33d219bf9961fdb3f2b915d2f6f7d37552246839a94623b65449b39c7201917948288bfbd5344f47f60221b321"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "33c41f393c284e19a82fe7ceb46fe71658c0ff9bf6581972b4fba156167a5f878fc158fe2f74ec6c58e6d381fa4f6d86c76b006f492a1d58244f757e9cffbf9e608dd54d386aa69c2d415ce1fe81e7edc0d2d9cc434a360f5cf808df3a414713e92830d1d1ca731df3ad931c227231def5b38d2288f03993011fd471c1252fc81c732a8e65a0d70c593b767978d3f9796c1c3507557582841b5c19d76cf5012bb80ada5e6b3b005fa481fbf5e81af926d55ab20e188dcca6f8ef8cbc30dc849a04fabb8851bdf293997df5a24aa707b1c49a65e95381b92a100e45e8"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x20}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}, @NFTA_SET_DESC={0x134, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_DESC_CONCAT={0x110, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7be5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x965}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000000}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8751}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe0f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9d9}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5b7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, r2, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x73}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}, @NL80211_ATTR_STA_WME={0x44, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x87}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xc0}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xaf}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x19}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffff, 0x3}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c081}, 0x20000010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000280)="d4f5fe3caab2d6b356e0a68dc7d3a23a60d0ff178b4db8388bf5f2de9d53c909ad961c4070ce410f677ca807c52fe1e624b314fbff05c08bd54dbfd52a7a", &(0x7f0000000900)=""/4096}, 0x20) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16, @ANYBLOB="0102ffee0000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000020", @ANYRES16, @ANYBLOB="00002bbd7000fedbdf250200000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r7, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB='d\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r7, @ANYBLOB="00000000000000000f0000000900010072737670000000003400020020000400000000000000000000ab3d1de7000000000000000000007fff002000080002000000000008000100000004004154a4398932e6a9e19aa2679b8bfcf191a5b4c524f3812c7eabcca8c95772e83a502743f5b151530f04cf0f5a0284921d910472afaa9e17556e90a9bb49f6fc97b0551af278543167157b2decc054ee51466b3f3649b8969ce711d6880f76f2ac9dea070f5e432f3d"], 0x64}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x34}}, 0x4) dup2(r3, r0) 17:15:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x2df6bd2f, 0x80000000, 0x3cf}, &(0x7f0000000180)=0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x805}, 0x88008) [ 946.770491] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd117", 0x30, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 946.865180] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:09 executing program 1: mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x52020, &(0x7f0000000100)=':$-(#)\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x40000, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b0879926", 0x38, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) fcntl$setpipe(r2, 0x407, 0xcc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) fcntl$setpipe(r3, 0x407, 0x80000001) sendmmsg$inet6(r1, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 17:15:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 946.953523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 946.970492] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:09 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b0879926", 0x38, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 947.071752] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 947.084514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 947.152803] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r3, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x14c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x320c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x546c836e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ec}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x14c}}, 0x8d0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r4+10000000}, &(0x7f0000000340), 0x8) 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b0879926", 0x38, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:10 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)="6b0f7f6aecaf9a7c71a713ad044c61d599e0d4d5b487ecd0b7a4c79850dca4ff3fdd189a26bb69c611a0ad78b6abc7b55d099f12fbf195387dfd44783122a633911abb35c30b3e5cf4316cd9c08fb288d39fcd934b23947abd011bc65e78b415f2410c054e4469f255b7a11c1da73ddf0284ac", 0x73, 0x3}, {&(0x7f0000000100)="14554db820d4e5b2500496b9a10b233b4ca17de28bd8d8569d6618aa7b6fb755c58bd933f3af4708ef7908287da0760b8591309093abbdbcbf092d98eea6830f0bb9d28b1d5227a5edb8f0fee58168903a4d20a523dbe6e9530ff2fd25f3f8cae0f236f2a42f681afb4517ceeac96932aa7edbb8f60ed1970a5a38ec999ed3eb527e07c08df9ad28de329e9d14190188da43e4d62e1dd8be", 0x98, 0x6}, {&(0x7f00000001c0)="264d472a96fae88f82d3b01f27106bfbcd0b13e74a09bc86d044f2a7b827043ef750f4f186b2f641c219c6aacd4bb6ba7db60b4d001ff385d989c9a5278349dfafd435485398933a02851fa05c9f95e6357ad9e6a01b8c429df582da350c66e15f362719bcbbd09bc2f09915208d9da752dc2e7a0ba6cd1bc9a21c168eb014be76ea7f10748c1e14e653a8da0472ec30ceb002935770224f25810384a58a00cc84103595f8d2c71f20e92a845fb66fb28edefdc85f81f7244798f97832538abaf2c320f6013fc6428175500083a2dab81cbe611fb49d71d731726d2d521f110d5ee4fbd2ebbcc51e2c9a8eec557d9d118295f1955d2f1d", 0xf7, 0x1}, {&(0x7f0000000340)="6934f4002e742decaa4ac47f57c03dab4bc82d6f06ddc67e0bbe179149a2ccc5fa720a2b4f422563e81ec0bc01259e146de4c3986197f007f64d99a460e3fd9db66abb96101d46738b0205437579", 0x4e}, {&(0x7f00000003c0)="81aa2831740fd83aa68c2c5639aececbb58a9f5b695a371b3e44fb1d068fd8ecd3e07118da3bd4eb8aaa580b9aebcb0e51203f38e7d6ff662855eaa5462a50ab0fc2fc60bde17a9fcb6f7f2fee4b940f7a476c62635b2ad048ed97e0b86ea12ddcd2d8d54bccce0d14e01ef907c7e42cb5e83367a9754c2fb21a3d77c60793400382d9181ce0e88dfa7bf2592f7ea797951264e579c7ab7a96abf2961c93ef148b65967a82de35c827dafb01ac1d3b677cb2b057c3902063d415b7b7fa6e4120d49808d2939ed37255e530a416a920a6f882f5e626ba5ca9", 0xd8, 0x100000001}], 0x1040004, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000f80)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000001000)={0x8}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt(0xffffffffffffffff, 0xffffd704, 0xf16, &(0x7f0000000fc0), &(0x7f0000001040)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) readlinkat(r4, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/218, 0xda) dup2(r3, r0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) write$binfmt_elf64(r1, &(0x7f0000000680)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x5f, 0xd1, 0x2, 0x7, 0x2, 0x3, 0xd03, 0x1d1, 0x40, 0x10000142, 0x1000, 0x4, 0x38, 0x1, 0xe08, 0xb800, 0x1}, [], "99f0f9cbfacf44f33c76e2f832115bc7f56a28a08e50e571eae49445e12ac6051b14e2f91ae60c8c55aaca5898bcef501dd2cc83f725cb120ebe57ffc783da53dce3f3834f1bf9025a8bb3c7d6b4286337b9ce2968d8ec6b09c7d2d24784e70e4fdc48cac392f232127c3af0b13e40fb71c3a231d5ce29120a0a179f9f9645e32e6d0e1a5c690f74f4999b32924bd756ef0ee6a7792e4b62872a35e82434d30fc0dc1791f890c9edd2c3b63832cee83e1f3abe252f37b91dcdeefbf606538b", [[], [], [], [], [], [], [], []]}, 0x8ff) 17:15:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x64}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_GET_KEEPCAPS(0x7) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000ec0)=0x400) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000e80), 0x4) sendmmsg$sock(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="c067fda6260c4782c7e440d460989f4d2bacf8b25489eb5cc3c6a469a8029101c1d63807aadecd20a1a3cb77abb3332482b9315a38226b35f4f398f28d104f292792f9aa18", 0x45}, {&(0x7f0000000080)="f26187b59af35916a20fdc187f3f8920a2", 0x11}], 0x2, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0xfffff800}}], 0x18}}, {{&(0x7f0000000180)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="5fa8240d1035441a709c48c1d0d030b4803cea20fa10bbe69907768bcae9c21847cf801086de4768ea0385d09b7ec8890090ea36c784291f120b7d9bf704bb536fb1fd3a798c598c8a9a3db08a4f4f360fef40ca557690a703e0bf478775ad7bc7d42bc83cdbb9d320c0361b55cfb4a9c4b37e0fc0c3425653f3646b2b3df071f7e4", 0x82}, {&(0x7f0000000380)="3ef72788006a891e3a368ec0a0537918b8d4f01c6e98a73d3b6794e0a4432fe74246f375581e443e348a15f52f0639a239c29a2ba61bb47cc3fe39b2a6ea37f98cdb8ea6d429769614b15cc3017f18d5746fee7c6d0ad50c9e8cf97e85d5bc1f7fc4882cc9ea1241fb3c69d67e7ba16d1713376d55b7a086eebb3c9ca65c129f1bae42b0cd439f19d8dda66eb342bb4aab338c19e20950245e35b83de441923af2ba72cff42af7806ce0e8f9842f1e79", 0xb0}], 0x2, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x78}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)="a25bca99dc48fae56f0474eab6c2677e9a6b2d2f1229b9c903aba8fd6f8bb8ba319c3210356bc399e35a82a93e9f119a6659d6d1c46895a886787201179bba710d2be6f9b04d0ae82b3f22cb61a3a5cf80b7762b7457aac3b86307d66d8a04b119e57c953cdcc205ff96f323f68358bc64a3528b523e6927549f69b2284443c995770f8a28d90cc9a2c31bf1e0a0ba4557f8d1b9e6827be22bc746501109be72da9b89948276", 0xa6}, {&(0x7f00000005c0)="0270fb34fa2049897fbdfd72de63bd7de9cfe35399ba4acd0c012927e49df46d1768800d7afcdd35ad5ee0d0ddebab4d1ccb65317ce09173c5f78b0961489db8d285f93ad77ccbb8123c3a8a1834e01a663d72e700663ebf9913aaefb933f7e14d287ce4d6c4c9d756db0783fc430ba1559d7c60428c5040b3b3fcb022af97106b96ac833f263683ba9cc3fb6c3248c2026c8e27da971556b9c988ceffe2220112020c3fc72609c1433bd53a7ba38179d343028aa92b1b7dfc7e4a563d93857c8b83c70d88e0d465c3a930134c9d854756eae68761af95acd69a369e8eeea71f7b27691cb2637d002438afdea1f1c59e93df8a8a87def5", 0xf7}, {&(0x7f00000006c0)="76fd166abe291f3c9f6e5548f3fdef91b99abc1967b8922e1616e876e448c23163e8a9d8f0980b8fa30cca30cffc2ad003a93fba12635b93d68ae3869a6a2e2ce4b58dfd6a70d549954f43bedccddc9b7506abce5fb1f03fdbb0da5e6a86f5aee2969db74f8e5c160ab5861a3e1b6507c6edab03df2a6d660a8635fa22fe9093bf48163735c5142592a758c3f83029ac382cce9cf7fc67da2f7bb6bfb67367ad4a285f969dd7c30b9e594ca4aec9578474ab909b15d9e1af1701396ec8648bdc171d34611386edbdfac4f127c687aa2c91740f0797312589f2", 0xd9}], 0x3, &(0x7f0000000800)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x98}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0xa257}}], 0x90}}, {{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'netpci0\x00'}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000940)="aa29720761d97a85ce955dc119feabb5249a6ea4da879a4e84a251d12c8f02beb8e85094c5470cb5f8dcb5095dd57f4c73764428de933be81266316f2831b7255a9f0db6987757711eec35a1c56221ec74d5d124e7ea43f321c1fa5b34385e3f6aa370d1e84b1d8f2fab8a9f70f693ed748482132fd05d70649d34c284529179570f87e936bd27b4b699746c55ca82601406f78178c9b0a138625c3fb1041436f29ebf8a6348dc02732ddf887d62015e94edc502461e4093601460400268246a1e3d504268793aa6dcb423a71802c7d20d327afcc6cc0c5cce4ccf1fa9834c5926021dad52ceb70b765e81563887229ebd062ce0e4", 0xf5}, {&(0x7f0000000a40)="5764a06a03ef48c4e9ea5a4bd45b2c6e6d8b612c56aea5f702330a476c2482aa991b33e3096fe8913c86490451b122d0ec1390f9f1a7b76cda6a4bcd94e97fbc939acd7aa8f0b409d6fb553ad6c96cb1e629d1ef98476e5794b0e701b48709100cda059d59579137035c4bb66caa1ca7dbcb99eaf440c8014c35d440ce121b21396f659c03cb896978580b1d7d5efc4125f19b9f335a9b26c89bcd63b713599dbb6167d41d45095d11ef6462086e789337d61aacce0e1b1fec79b9fe", 0xbc}, {&(0x7f0000000b00)="a3ef1e31beb2eac90be5c9e8e801d6b200dc764b9606178eb61176004972912672d2ab501aa37fddf64dc3f1306f2d7957842ee36cf76c8eebb373a6cb77aa532bb607fa96301a3639a0f675f4457091", 0x50}, {&(0x7f0000000b80)="c5b3f0f1ad4389db1120d27e87bde27d93f85e7c38984bc8761cb705f862467001b4c3d46e1117d5825ff2d459826f204a05198324f672b18ebc777b0768b97c24ea806a4ff5380652b4e8fae1ba7f8d03f410c83d188006b749da2e0dd7a6699c1e9c040db6d17201263e06f8a04a2d9cc57af6fe80e99cc99988dac814feee78c2718218fddfbd80e9b0b9", 0x8c}], 0x4, &(0x7f0000000c80)=[@timestamping={{0x14}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffff81}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x90}}], 0x4, 0x4000) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f0000000e40)="39d0e89790e6c6985f36069a46dd0c47") 17:15:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000140)={0x5, 0x4000}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0xc}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008d5}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000320a0102000000000000820312287f1fe82a034000000000e4"], 0x1c}}, 0x0) 17:15:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@private=0xa010101, @local, 0x0, 0x6, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @empty, @multicast2]}, 0x28) 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967", 0x3c, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x100) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000640)={r3}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c432c9187f01766efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c0663502000080f26eb800088ec00fae470b", 0x38}], 0x1, 0x51, 0x0, 0x0) syz_mount_image$ocfs2(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000540)=[{&(0x7f00000003c0), 0x0, 0x8}, {&(0x7f00000002c0)="ce877eda2e921ea34d61fda94b10bf9a411f69816a65d80a5d346a82973e20196c2e52a3ec5cde10c55d62c22bf4ddf51ee0f0b52e2341c69297ac46adce1bb1", 0x40, 0x8}], 0x0, &(0x7f00000005c0)='/dev/kvm\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000300)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, [0x0, 0x3, 0xb939, 0x8, 0x80000000, 0x8, 0x7fff, 0x7bf9, 0x5, 0x7fffffff, 0x800, 0x0, 0x8, 0x2b6, 0xfff]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000600), 0x4) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000680), 0xe}, 0x0, 0x0, 0xbdcc, 0x0, 0x0, 0x5, 0x400}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) select(0x40, &(0x7f0000000340)={0x1ff, 0xffffffff, 0xfffffffffffffffa, 0x144, 0x3f, 0x2, 0x6, 0x920}, &(0x7f0000000380)={0x5, 0x800, 0x9, 0x7fff, 0x8, 0x2009, 0x718, 0x3}, &(0x7f00000004c0)={0x8004, 0x1ff, 0x9, 0x5, 0x7, 0x81, 0x44e, 0x6}, &(0x7f0000000500)={0x0, 0xea60}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4080) [ 947.409356] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 947.443415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25449 comm=syz-executor.0 17:15:10 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000040)={0x4, 0x8000, 0x1, 'queue0\x00', 0xa}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r3, r0) [ 947.535703] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967", 0x3c, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0xfffffffffffffffe) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x104}, 0x0) ptrace$pokeuser(0x6, r1, 0x4, 0xff) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20060000130a01020000000000000000050000000c00064000000000000000028499be2466c58d040f2d85ff93c87c9d87179d0aadc9485bc00eba"], 0x20}}, 0x40004) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0xa2000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) 17:15:10 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) [ 947.695836] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = getpid() timer_create(0x0, &(0x7f0000066000)={0x0, 0xf, 0x0, @tid=r3}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r4+10000000}, &(0x7f0000000340), 0x8) [ 947.745776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25457 comm=syz-executor.0 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967", 0x3c, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x1, {0x4, 0x1}}, 0x14) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000130a01020000000000004000000000000800034000000000c73275813c2fd354620e99b14411afe39a15dee67584852b01d9fba11e3fb0972924c20eae5b2e646899e272d217fed9d49e4d344200839ab9274f09e1d15109eede37c4e6115accd6a02b6ee6dc53028e9e1e542bfde70cc8edf43766a2e86c07af0018b3c1a516c71511467690ac20a148948e17c1776f39519e7aaf3b574db43193876cb323447d1dbe1aa94cbd9b2de72725040d30ada3218e322c8555ff63c3f766a5d1279940c05d41a0f06628b5322a7f59"], 0x1c}}, 0x0) 17:15:10 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(r1, r0) 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582", 0x3e, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 947.948244] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r3, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x14c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x320c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x546c836e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2ec}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3c8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x14c}}, 0x8d0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r4+10000000}, &(0x7f0000000340), 0x8) 17:15:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'wg0\x00', {0x2, 0x4e24, @loopback}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xab8) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 948.107428] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:10 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582", 0x3e, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 948.255056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25517 comm=syz-executor.5 [ 948.292795] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x400}, 0x4) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582", 0x3e, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0xc1, 0x1, 0x8, 0x2, 0x16, "7577d2b3c21ee4c507d08caf90f3481a91e8fc"}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {0xffffffffffffffff, 0x202}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:11 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r2) r4 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)="58c2b4ff211c4bb46d84178b32426cd3bda26be4234882e2d86724a50eca4254a9c19fbe2fb96d3e76d745d0e7b66f05b7730e6875b2b62a8f393345d6056fadcd6de6b1299a7097710fc270018dc9f1f092883fcade14b47ce56f59ae7017d7be5a5bde3a31d048b9ac3fd5c4817a6080f1ee3874", 0x75, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6}, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$user(&(0x7f0000000440)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)="2670c208", 0x4, r7) r9 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r8}, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f00000000c0)=[{&(0x7f0000000140)="1cf6d7ab114d26e75b913a92a8227aa4ad143f3c5b25ec87a42d72e4131cd4f0427de17d369b7ea6ef0b8d06b95a53bd70027b8c7e863d5f4d2b09ce9670f47dc509f0dfebe960db0d53c7c46e698d9acfdce49ca3fe2193a6d0cdec07f0aba99f9c531121cbd02af0", 0x69}, {&(0x7f00000003c0)="66badd810811d7a75e470c4978d5c6f63d94f60ed630ce1de2df28a1fb31fc8b5f823e33e9d52036b409c0819b86d14c54d2c5fc74120587246f48bccbd9dee59178a015e170f5de91d782332e6b154fdebf599117ad", 0x56}, {&(0x7f0000000640)="68c6881d95b5d89099ac24ed7e6ec18a6f4edd8b75902404bb8e8e10cd8494326aa6e05f3aad56d0b4719f1233f75429828516c902ca909becec21782f6fee6451438cceea4b6ba5248f1a1a3162e43dece7dae0431cee51b5d980ca68fdd52af2d9f6d432a93334fb3e4a7c61b87516d5a1f003539740869b75c15c561081c298ad76fc8ec10fcf713cf62d3f6079493d51776adf0f3b5e80f53f6f8a6febee19", 0xa1}], 0x3, r9) r11 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x3}, &(0x7f00000004c0)="099a4112d0e6b4f55b7f0ee11e22157e9c6d2819fc4d68a28419762313478889bc4e6e7f755173d8e75778e3c3d48f756e0104e57172b258c4ef908bc8528328cb738ea789b153ada42806fb4d22c0c570750c66d33c08a490a36e3262cd96b759cd95a8b7a0c8954ba9f216fb7e663da767d7cedbe1be3282df7697525041677d0189a8fec5fc082350a38cdbeedca11c09e12a51432eeaad", 0x99, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r11, r3}, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r11, 0x2) dup2(r1, r0) flock(r1, 0x0) 17:15:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e1", 0x3f, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 948.479908] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x111) recvfrom$inet(r3, &(0x7f00000000c0)=""/152, 0x98, 0x40010143, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000040)) statx(r3, &(0x7f0000000180)='./file0\x00', 0x2000, 0x200, &(0x7f00000004c0)) 17:15:11 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x10001) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x0) r4 = gettid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={[], 0x47f, 0x16, 0x9c, 0x9, 0x2, r4}) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, @bcast, @rose={'rose', 0x0}, 0x401, 'syz1\x00', @null, 0x3ff, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x20, 0x4, "6b2f0ce17a046a706daf8fe48d8504028af0e210a6b084230567f8f6b18e67cfb97e10cdc8ec7471dd98d931614289ac610603c6c89500", "ffd8fc1d1073c1f73d8280fcaccf59da2ff49b8bd3d07ebbf260b7df0e1392bd", [0x2, 0x6]}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x1c01) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e1", 0x3f, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 948.595326] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) dup2(r0, r1) [ 948.704528] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e1", 0x3f, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000280), 0x4) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r2+10000000}, &(0x7f0000000340), 0x8) 17:15:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:11 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x14200, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000000)={0x8, 0x1, 0x8, 0x5, 0x400, 0x81}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040)=0xbcb5) dup2(r2, r0) 17:15:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000100)=0x8000, 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xfffffff9, @dev={0xfe, 0x80, [], 0x33}, 0x9}], 0x1c) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 948.890072] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000001c0)=[0x5a9101, 0x160, 0x0, 0x6, 0x40], 0x5, 0x1, 0x20, 0x3, 0x3, 0x80800000, 0x40, {0x8, 0x1ff, 0x3, 0xff, 0x1f, 0x0, 0x1, 0x1, 0x9ac6, 0x6, 0x0, 0x10, 0x10000, 0x9, "96c96f84937672a5cd15abd5d78e1038eb6e04d4b3a7c4bc7b0a9a99af2e9dae"}}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000130a0102000000e023a200000000800000000008000340a13a1843d6924b00"], 0x1c}}, 0x0) 17:15:11 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) dup2(r2, r0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d12, &(0x7f0000000000)=0x4) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 949.008298] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 949.046029] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:11 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x503c00, 0x0) socket$inet6(0xa, 0x2, 0x0) fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9}, {0x1f}], r4}, 0x18, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x81, 0x0, 0xb0, 0x0, 0x4, 0x8884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8, 0x5}, 0x2, 0x0, 0x4, 0x0, 0x4000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) r7 = dup2(r5, r6) ftruncate(r7, 0x40003) [ 949.068422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:11 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) 17:15:11 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 949.149536] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:11 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000040)={0xb, @sdr={0x3031334d, 0x3}}) pread64(r0, &(0x7f0000000000)=""/42, 0x2a, 0x2) dup2(r2, r0) [ 949.221460] binder: 25583:25589 ioctl 40086604 0 returned -22 [ 949.251350] binder: 25583:25589 ioctl 40086604 40000000b07101 returned -22 [ 949.278099] binder: 25583:25589 ioctl 400454d0 2 returned -22 [ 949.295532] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 949.312660] audit: type=1800 audit(1591809312.018:57): pid=25589 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="loop5" ino=3 res=0 [ 949.385191] binder: 25583:25601 ioctl 40086604 0 returned -22 [ 949.398388] binder: 25583:25589 ioctl 40086604 40000000b07101 returned -22 [ 949.407040] binder: 25583:25601 ioctl 400454d0 2 returned -22 [ 949.427554] audit: type=1804 audit(1591809312.138:58): pid=25601 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir187655332/syzkaller.2wMx7F/2065/file0/file0" dev="loop5" ino=3 res=1 17:15:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x4e24, @multicast2}}) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {r2, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340)={[0xfffffffffffffffc]}, 0x8) 17:15:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffd5e, &(0x7f0000000340)={&(0x7f0000000000)={0xffffffffffffff17, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x0, 0x3, 0x1, 0x0, 0x7}]}, 0xfffffffffffffdf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 17:15:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:12 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x101400) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e23, 0x80000001, @private1, 0x26}}, 0x6, 0xa68b, 0x0, 0x709, 0x5a, 0x6, 0xfa}, 0x9c) 17:15:12 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8295, 0x0, 0x6b, 0x0, 0x1b, "cc697edce02d65a3a1f83c62319080bb7d648b"}) ioctl$TCFLSH(r0, 0x8924, 0x0) 17:15:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 949.572937] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:12 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, &(0x7f0000000000)=0x4, 0x4) dup2(r1, r0) 17:15:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086604, 0x40000000b07101) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r3, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x40, 0x2, 0x0, 0x1, [{0x3, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) recvmmsg(r7, &(0x7f0000008580)=[{{&(0x7f0000002680)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002700)=""/117, 0x75}, {&(0x7f0000002780)=""/196, 0xc4}], 0x2, &(0x7f00000028c0)=""/170, 0xaa}, 0x4}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000002980)=""/149, 0x95}, {&(0x7f0000002a40)=""/219, 0xdb}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/186, 0xba}, {&(0x7f0000003c00)=""/163, 0xa3}, {&(0x7f0000003cc0)=""/243, 0xf3}], 0x6, &(0x7f0000000400)=""/140, 0x8c}, 0x6}, {{&(0x7f0000003ec0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003f40)}, {&(0x7f0000003f80)=""/232, 0xe8}, {&(0x7f0000004080)=""/3, 0x3}], 0x3, &(0x7f0000004100)=""/154, 0x9a}}, {{&(0x7f00000041c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004240)=""/19, 0x13}, {&(0x7f0000004280)=""/153, 0x99}, {&(0x7f0000004340)=""/68, 0x44}, {&(0x7f00000043c0)}], 0x4, &(0x7f0000004440)=""/242, 0xf2}, 0x1000}, {{0x0, 0x0, &(0x7f0000004840)=[{&(0x7f0000004540)=""/24, 0x18}, {&(0x7f0000004580)=""/127, 0x7f}, {&(0x7f0000004600)=""/118, 0x76}, {&(0x7f0000004680)=""/252, 0xfc}, {&(0x7f0000004780)=""/155, 0x9b}], 0x5}, 0xff}, {{&(0x7f00000048c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000004a40)=[{&(0x7f0000004940)=""/28, 0x1c}, {&(0x7f0000004980)=""/183, 0xb7}], 0x2, &(0x7f0000004a80)=""/177, 0xb1}, 0x7}, {{&(0x7f0000004b40)=@pppoe, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000004bc0)=""/150, 0x96}, {&(0x7f0000004c80)=""/78, 0x4e}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/106, 0x6a}, {&(0x7f0000005d80)=""/4096, 0x1000}, {&(0x7f0000006d80)=""/68, 0x44}, {&(0x7f0000006e00)=""/154, 0x9a}], 0x7, &(0x7f0000006f40)=""/90, 0x5a}, 0x2}, {{0x0, 0x0, &(0x7f00000084c0)=[{&(0x7f0000006fc0)=""/86, 0x56}, {&(0x7f0000007040)=""/66, 0x42}, {0xfffffffffffffffe}, {&(0x7f00000070c0)=""/128, 0x80}, {&(0x7f0000007140)=""/239, 0xef}, {&(0x7f0000007240)=""/108, 0x6c}, {&(0x7f00000072c0)=""/135, 0x87}, {&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/249, 0xf9}, {&(0x7f0000008480)=""/3, 0x3}], 0xa}, 0x401}], 0x8, 0x0, &(0x7f0000008780)={0x77359400}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000088c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000008880)={&(0x7f00000087c0)={0x9c, r3, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}]}}]}, 0x9c}}, 0x0) socketpair(0x23, 0xa, 0x5, &(0x7f0000000000)) [ 949.670584] mkiss: ax0: crc mode is auto. 17:15:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:12 executing program 5: getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) rt_tgsigqueueinfo(r1, r0, 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x20, r6, 0x7, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}}, 0x0) [ 949.713062] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:12 executing program 5: syz_read_part_table(0x80, 0x40, &(0x7f0000000100)=[{&(0x7f0000000000)="c27aae4f5f00636999c2cde9b08d665b27caf1b6d683b6030f97938287fb55167ed30b58d73adb9ba6b9e70d475dfd8e08f23c44eaf7b3d6dfae2df52a82a5c2292b69e7a987e44d201805663e4b83ca8821ee", 0x53, 0x1}, {&(0x7f0000000080)="e01d7280afee51d1135b616dcd62291e8b1c5f27ce328256bbe72b3560", 0x1d, 0x4}, {&(0x7f00000000c0)="ae9eb1be14b21d24537e8f5a1c5963f820087b5239583e9773986a8709943e", 0x1f, 0x7}, {&(0x7f0000000200)="cafd00ef367c624f0b5f5e22f1438f9f330dd648c36965046f5b8d6606b45ccf0ce54a0b9725c4f026a6951fbe16052c09ebbca5ef595b0fc010ecb601d59d6e9ddcd3138174352ccc494fe1bc713a37265ddfaaba221e3e0645749462597f774458317cea50cc15bdf669a1f80a1dac2097fdfc8770424f4dd68ab63f4860", 0x7f, 0x9}]) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x4) 17:15:12 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r2, r0) [ 949.871114] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {0x0, 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0x0, 0x3, {0x3, 0x0, 0x5, 0x7fff}}, 0x20) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x1642}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a0102190000000009"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x3ac, 0x1, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFQA_PAYLOAD={0x9f, 0xa, "fc2fe3d08ab1ee360aa54890c2dd0fb94fbabe15fadbf43c29f8d7e6237bb8ab19df79c7eb71e7b42187c51d8e09a9ae75df410b61157246414b5d407d46323c9c49540f3407e3165393105c5ac3406de9d6d9bd7926d8da4066f3eb83a99995dba5cc5f7b9df2099f5c362bc379be3cc6190455aea27b1d26891fa3bd0da469d27d2f6197c4f16a315dd4aa41a1c018ac806822129a647aed2863"}, @NFQA_EXP={0x4c, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, @NFQA_PAYLOAD={0xe5, 0xa, "a9d963489b84c57dbcf75dae08c2e09060b89597960aba5888f1fcb3f8ac9b67e6a68d960e9320bde2195f922d4db2506c48604021289ca5fade8d8caa4b8d4fdf5d342ce484b9a584488c4a12f4516b031b12ea8e1dcdd5d8593dcf8dcd2ba7e0a22bc8e8f64a59cfd336502242f68e53f75e67c54a0992ad661d7b414340875731ce820519e0c1cadf40c0fa054d911d1b5a18b92852c44690edfe24ac64faa3a5430f4f4435c15b481b4b2f6a770352d0e25ed0af20a76dd0ef7314c643836f03033d69ae1575a60fe57529c5c5eafbdbac3abd12a5277434a8ff552de2de62"}, @NFQA_PAYLOAD={0xf0, 0xa, "849cbed5836e21b2267b4de9aaa591e233ff551d16681457b660d1c0c0fc61a67c209b5bc79060cf4b46db503e4a0eaac56d08a4708b29af9e8997c18a7a5e635ea2d062a466cc2fd8c1b4f13ee64b8542edcf0987551861c84d66c2212537c72045167f904c3c32278dad93525e6890778b373f7c63aff615a9982164868b4cb1a5620b2c0697737337a27f3b8138b1096fcaae2a8d4c3bcd7477721613de29825a98d8052f63ca06a4e53a78317bf922cd2cf5b3063c50abd19a628d555572a7d47a97d01577407457fd68837c391b0f7ed56ff4256fd16beed6797cf4ac55ec07e96de27cb3227aaf337d"}, @NFQA_EXP={0xcc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1000}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x62df}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x4008010}, 0x8080) 17:15:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x4e24, @multicast2}}) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {r2, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340)={[0xfffffffffffffffc]}, 0x8) [ 950.007117] QAT: Invalid ioctl 17:15:12 executing program 3: socket$phonet(0x23, 0x2, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) 17:15:12 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {0x0, 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 950.072697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 950.111541] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:12 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0xfffffffffffffe93, 0x13, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x0, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}]}, 0x1c}}, 0x0) [ 950.133290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {0x0, 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 950.228122] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) renameat(r1, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000080)='./file1\x00') 17:15:13 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCNXCL(r1, 0x540d) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0x1, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e8010008", @ANYRES16, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8010000", @ANYRES16, @ANYBLOB="000225bd7000ffdbdf2502000000100008800c00078008000500c382c04f08000100030000000800020002000000400108804c000780080005008f0e47430800050082bb8a4a08000600c7000000080005002cdf29630800050018a3cb4908000500289b6b500800060024000000080006004d0000000800050076181c1a1400078008000600c4000000080005009eb659020c00078008000600a80000000c00078008000600e60000004400078008000600250000000800050071879872080005009cdd597d08000500d6bfe80a0800060027000000b574b615b0d892a0e2846175a08908000500b034ac0808000600de00000008000500480d632114000780080006000a000000080006001a0000000c00078008000500771ac9682c00078008000500c66384520800050097cc3f0a08000500fd93524208000500bf397310080005002277c6363400078008000500974f742f080006003f00000008000600260000000800050008c2e07d08000500ef609d1408000600b600000008000100030000006c000c8024000b8008000a00573a000008000a00fb0f0000080009002263b96f08000900bf7464190c000b8008000900aab2de7e24000b8008000900ec308861080009008b5e080a08000a007896000008000a00c4ca000014000b800800"], 0x1e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x170, 0x0, 0x529, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1340652d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dac5e16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c8bfeee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e142317}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x173333a5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26afd41c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x415affe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e28e3bf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x544e7658}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x402a2d36}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7172487a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a1bc1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fb056ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d6fe64e}]}]}]}, 0x170}}, 0x80) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x2a0, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe8, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a2695e3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43186a9e}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eaf8691}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57b3da0f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f3e218}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37cb003e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6202c83f}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2dac757f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x795b681}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76f8e837}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35be7a16}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0xaf0a445a0252da99}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ebf0288}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26115552}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10c17e9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50b82c24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xce28a53}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x236fdb9}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45e94b99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x615533c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a87fb16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fdb1fa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4befb69e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e824d72}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c67a0e1}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f47f230}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ad4eb84}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f41c146}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1eab5c61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3ff}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x880}, 0x24000001) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x44}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @local}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r4, r0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000140)) 17:15:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640), 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:13 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r5, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) writev(r6, &(0x7f0000000640)=[{&(0x7f0000000440)="b26e84fe1387a933b50a0d04a9f3b56e4a95bc1b239f5e998df9c7a3d13ae3711a99631f9407fc7eec886701775e48d4628346b779ce711986bf66fab9453fb8f9be89", 0x43}, {&(0x7f0000000280)="203c5b53edc251b69659c077629daa52bcf5a457", 0x14}, {&(0x7f00000004c0)="9e7ac900aa6c0e3057b50109baec751c8ccda72e933b7687a62e77fdab9f03ba1d094ba024956c5683c4f684220c750dbf119c5086e041880e923674dd4c278a80a0c1c16a0216c64118f3e4c64af26585756ee5f7deabddef73898ebbe06bade23909ec1e56433c2ae970e80a", 0x6d}], 0x3) dup2(0xffffffffffffffff, 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc0205647, &(0x7f0000000240)={0xfffffff, 0x40, 0x0, r7, 0x0, &(0x7f0000000040)={0x990a75, 0x20, [], @ptr=0x19c5}}) dup3(r7, r8, 0x0) [ 950.342409] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x40805) [ 950.447522] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/xfrm_stat\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0x8010, 0xffffffffffffffff, 0xc8a6a000) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x4084}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000180)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:13 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_mr_cache\x00') dup3(r0, r3, 0x0) 17:15:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$inet_buf(r1, 0x0, 0x4, &(0x7f0000000180)="0c932d423c11ffb58b7c421d2c1226ac3d01ec7288500e1436af81140cb7cf338bee7062cf1f285e3a8401b3ac1d97da98e421953dfd9748877372a3234e407d75229b367426c3ebe73a4cf4f984cff0a51834faad1c864eb79135b02a99f9859c6d1d20152136ea6de60e058ac029f5572088701db9f8717fd240848e18b7d62a0e7bcaaf8c3fa671437771408bbdd6a43081ab6a6ffe2479f2bc833876960705e74c24001caddebaec966d622eef949d74a4110b73", 0xb6) 17:15:13 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') dup3(r0, r1, 0x0) 17:15:13 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) rt_sigqueueinfo(r1, 0x32, &(0x7f0000000080)={0x11, 0x5}) ptrace$getsig(0x4202, r0, 0x7, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000800001080000000000000000000000000800034000000000"], 0x1c}}, 0x0) 17:15:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640), 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x4e24, @multicast2}}) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x14102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {r2, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340)={[0xfffffffffffffffc]}, 0x8) 17:15:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a01020000110000000004000000000800034000000000"], 0x1c}}, 0x0) 17:15:13 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640), 0x0, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:13 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x6, {0x6, 0x5, 0x1, 0x5}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:13 executing program 3: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/devices\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) [ 951.032280] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:13 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x6, 0x20, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) dup3(r3, r0, 0x0) [ 951.106667] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0xfd8d, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x10004}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x2, {0x200, {0x0, 0x4, 0x3}, 0x100, 0x0, 0xee00, 0x4, 0x3, 0xb7ec, 0x6, 0x20, 0x7, 0x0, 0x7, 0x7ff, 0x5, 0xffffffffffffff00, 0x9, 0x1, 0x1f, 0x101}}, 0xa0) 17:15:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a30", 0x8, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 951.550588] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000004c0)={0x81, "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"}) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x7ff, {{0x2, 0x4e23, @empty}}}, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9d}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="550000006fa9977ad00f8b3e8d0d5bc9b4ae2e4019bd27deacee080e0568a899576e4b1071706aa0840d664dfe29e5a016edde087c729a052e98e3a2adc5391b69ff010000a6ca8a2f075ef2c990b711d08248a247973cec3d0a24e4cc4d8843ae8120707149a69dce054f441622b3801c017c8cc622223bb9d69b83b6d01b3ee40d7748418e80ecafa6bbe9fa47a2de5aba4d1d75eb582adeb9c99c134f6132a836d50049415184da07b3efce5207ac2ab11789e1e167bc3bd80a1d76733bb223ee85adb55066349281684a2cf10c6ecbf9a376d7cb4fd3eff47f80235796751ead334ab7438afd337a1c87d98466fe02f32f7309995c7879781d742fbd944865427c8673fe188eda1d3ffad6bbfc6704bedf80a386373f5c259bcac697e3163d06ccadb1f97837023465147a286441a020a60d380c064065a7a3245d3136ff6383e001d3e1ba40adb386515a535ab8ae8ca18afd9972930e608a432daffdff7a4e4794d4891608284f7cc69bc970835a40300eca06751af875787cdfd6b7e89834eb1fc0704fcad544ad70f4d4ff4c6849237dda32e5c80c8dd785eca733ab30777a9b790d000000000000"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7509bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:15:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000ac28edf58de22e8e0000000000000000000800034000000000"], 0x1c}}, 0x0) 17:15:14 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000040)='./file0\x00', 0x10000000, 0x0, 0x0, 0x20b0005, 0x0) 17:15:14 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = dup3(r1, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000180)={0x9a0000, 0x9250, 0xfff, r4, 0x0, &(0x7f0000000140)={0x980922, 0x6d2, [], @p_u16=&(0x7f0000000100)=0x7}}) write$char_usb(r5, &(0x7f00000001c0)="302ae3", 0x3) 17:15:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a30", 0x8, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:14 executing program 3: socket(0x18, 0x4, 0x4) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xf18, 0x153, 0x8001, 0x8, 0x7}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r1, 0x5, 0x20, 0x5, 0x9}, &(0x7f00000000c0)=0x18) r2 = socket(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xfffa, 0x5, 0x1, 0x1}, {0x6, 0x0, 0xf7, 0x60}, {0x7, 0x7, 0x0, 0x3}]}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000840)={0xe5, &(0x7f0000000180)=""/229}) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000030000000000000000007663616e30000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff00000000"]}, 0x3c0) 17:15:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a30", 0x8, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0xc}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x10) 17:15:14 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) fcntl$notify(r0, 0x402, 0x21) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:14 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f", 0xc, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0x104800}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x94103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x5}, 0x18404, 0x4, 0x100, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 951.822513] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 951.859082] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:14 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc00, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) r3 = socket$inet6(0xa, 0x80000, 0xfffffffc) close(r3) [ 951.969705] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000004c0)={0x81, "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"}) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x6, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x7ff, {{0x2, 0x4e23, @empty}}}, 0x88) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9d}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf93a1a7509bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:15:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x5}, 0x16, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="550000008bac11273c79cf4e9f44d72644bce2efb3e6f33263e249e7656ef5920bc168476d2512cdccfae3067f22d3a7e2fae0ea46e4ee12be8d809a93eda7baf6845ca322e6dbb1496304eb7e3962a78de50db23fb88cb5f40c438890d81b68e770582845c75efb87c579e9c67c794820c43d73813f7a150f54694e7b1a8691f0951d53023a9ded7922e8b0408de6d1", @ANYRES16=r2, @ANYBLOB="0102ffee0000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1cc12220", @ANYRES16=r2, @ANYBLOB="00002bbd7000fedbdf250200000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r6, @ANYBLOB="00000000000000002800120009d47c2664419900"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000100)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, 0x0, 0x800, 0x5b, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000881}, 0x8000) 17:15:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f", 0xc, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:15 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x7fff, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x7aa3ee1a044ece87) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x14) ioctl$KVM_SET_LAPIC(r2, 0x4008ae89, &(0x7f0000001a40)={"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"}) 17:15:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'gre0\x00', 0x10}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x5}, 0x18404, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f", 0xc, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 952.813155] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 952.823215] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:15 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') connect$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0xfff, @local, 0x1f}}, 0x24) dup3(r1, r2, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x5]}, 0x8, 0x0) 17:15:15 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000018c0)=""/246) r3 = dup2(r2, r2) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0022d4a45f7c85e8cc8aff1d21753afddb7a4ebf48e6770d14c0510f5cadf586472745b420b3e1ac504763d2d2c67b634df566e244e51412da3128b28bab6ab594d4fd05de61f8dc26ec329ac5fb2f5c5f12504682edbdc16db16f7af14186ee874287912cfc4dde2c72056e3a3e2ba89de5ba0bf67143446ae8416947abd226ab13fef89fc82c9db05f673553345e9bf3c5de27a6714410583371b0a9408104e2c56ff62a5a13eb68b957f5f57fb9ee4721800733762412ebbe2eb60df7c141888ada45f0794df4fd6ebe9b26d7a05cbb1300f1f63c"]) [ 952.897970] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:15 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) 17:15:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d01", 0xe, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 952.985193] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 953.095060] 9pnet: Insufficient options for proto=fd 17:15:15 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d01", 0xe, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 953.129294] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 953.230618] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@increfs, @exit_looper], 0x5b, 0x0, &(0x7f0000000140)="a66f7a089ed3c8ff301f0419d898c490f262783ef044feb812997fc3e2313d4dc5fff3d5da16be1b9cfc9bba1905dda116d6a98a4b32d6f382e0390f1ca2138c34dc79b78671b206ece247cd4e42829074fa42ac26b6f617a0c513"}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x5c, 0x6, @local}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4836af922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 17:15:16 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x403, 0x2, 0x8}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x128000, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000140)=""/225) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/14, &(0x7f0000000080)=0xe) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r5, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d01", 0xe, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x20013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000300)='net/rpc\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$PPPIOCCONNECT(r4, 0x4004743a, &(0x7f00000000c0)=0x3) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x0) dup2(r2, r5) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40000, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r6, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={'xcbc(anubis-generic)\x00'}}) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000080)=0x24) readv(0xffffffffffffffff, 0x0, 0x0) 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 953.437506] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 953.527718] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000180)=0x5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xd022}, 0x0, 0xfffeffffffffffff, r0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/dev_mcast\x00') sendfile(r1, r2, 0x0, 0xedc0) 17:15:16 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_tables_matches\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:16 executing program 5: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000240)={@none, 0x9, 0x9, 0x3, 0x7, 0x7fff, "a09da1e82c213e44074d18d22e625726a33139482e0d11d091e95ceb450f9789ecf01368012dba87610d19217f729a950a53295f00375e62c72f52b948e710b1e77f2c906d23de6a0f89f0e8a58692c6223ebd8cb48d5d36c0b7ebcaa061c8d139c33604001e612d59ddc2eb5103491bc7b4398956da3a8822180b1c99f6d58a"}) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'veth0_vlan\x00', {0x2}, 0x9}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:16 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x2, {0x6, 0x0, 0x8, 0x8000, 0xf2, 0xfff, {0x1, 0x8d, 0x6, 0x1, 0x5, 0x3a, 0x7, 0x2, 0x8000, 0x100, 0xff, 0xee00, r2, 0x3e, 0x80}}}, 0x90) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(r3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r5 = syz_open_procfs(r1, &(0x7f00000001c0)='timers\x00') dup3(r4, r5, 0x0) [ 953.849474] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 953.974637] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:16 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000e14010029bd703c100a40ce648b00ffdbdf00040000000800010000000000080001000100000008"], 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x4) r2 = socket(0x8, 0x800, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x5, &(0x7f0000000140)=0x4, 0x4) dup3(0xffffffffffffffff, r0, 0x0) 17:15:16 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 954.112112] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 954.249212] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x0, 0x1, 0x1, 0x17, 0x4, 0xd38e}, &(0x7f0000000080)=0x20) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x80000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) dup3(r1, r2, 0x0) [ 954.344919] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$TCSETXW(0xffffffffffffffff, 0x5435, &(0x7f0000000280)={0x88a1, 0x72b9, [0x9, 0x8000, 0x1ff, 0x40, 0x7], 0x9}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:17 executing program 5: ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @remote}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000240)={@none, 0x9, 0x9, 0x3, 0x7, 0x7fff, "a09da1e82c213e44074d18d22e625726a33139482e0d11d091e95ceb450f9789ecf01368012dba87610d19217f729a950a53295f00375e62c72f52b948e710b1e77f2c906d23de6a0f89f0e8a58692c6223ebd8cb48d5d36c0b7ebcaa061c8d139c33604001e612d59ddc2eb5103491bc7b4398956da3a8822180b1c99f6d58a"}) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'veth0_vlan\x00', {0x2}, 0x9}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x201608, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 17:15:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000100)={0x1000, "c847859f9fa9e01ec62573547cbd5710d392fb320b9c671badcc7f71f4a2e89a", 0x4, 0x800, 0xffffffff, 0xfff, 0x10, 0x4bc3d911f26fdb12, 0x4, 0x7}) setresuid(0x0, r4, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x76, 0x6, {r2}, {r4}, 0x99, 0xffffffffffffffff}) r7 = syz_open_procfs(r6, &(0x7f00000000c0)='fd/3\x00') r8 = dup3(r0, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r8, 0xc008551a, &(0x7f0000000080)={0x8, 0x24, [0x8, 0x2, 0x1f, 0x6e, 0x7, 0x34, 0x7ff, 0x6, 0xfffffffb]}) 17:15:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0102ffee0000000000000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r4, @ANYBLOB="00002bbd7000fedbdf250200000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x24000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="19000000000000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x41c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xc25}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x32}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x9, 0x20, 0x0, 0x80000000}, {0x7d5, 0x3f, 0x7f, 0x5}]}}}]}}, {{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x723}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x29, 0x80000, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0xbb1, 0x9}}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) 17:15:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {0x0, 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000000d0000000100008005000000010000005c0e0100000000000400000061000000080000000800fb00ff000000000000000400000005000000000400000800000000100000000000000100008009000000020000002600000083710000000000000200000003000000ef000000070000009600000000000000"]) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 954.757163] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) 17:15:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {0x0, 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 954.812801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 954.860773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25938 comm=syz-executor.3 17:15:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {0x0, 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = creat(&(0x7f0000000000)='./file0\x00', 0x112) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000140)=0x2, 0x2) dup3(r0, r1, 0x0) [ 954.945969] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 954.968706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 17:15:17 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600), 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 955.016037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25934 comm=syz-executor.3 [ 955.052503] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000000180)=0x5) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:17 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) [ 955.202955] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:18 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2e924d4f, 0xffffffa1, 0x7, 0x1, 0xa8dc, 0x1], 0x6, 0xffff8001, 0x85d, 0x1, 0x3ff, 0xfffffeff, 0x0, {0xfff, 0x6, 0x4, 0x3, 0xfffe, 0x8, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x9, 0x40, 0x6, "5deae121dc07177d4353d5e1e9db14b18030e4a0ef4f00f312305ebfa0e2bd91"}}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1) uname(&(0x7f0000000080)=""/67) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 17:15:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c891068994151220000000000"], 0x1c}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8082, 0x0) r2 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff", @ANYRESOCT, @ANYBLOB="0f00030000000b00e0ff0a000600050006800000"], 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x54, r3, 0x300, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x54}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x35}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24004804) 17:15:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600), 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:18 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r2, 0x0) 17:15:18 executing program 0: syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x464}, {}, {0xffffffffffffffff, 0x2}], 0x5, &(0x7f0000000300)={0x0, r2+10000000}, &(0x7f0000000340), 0x8) 17:15:18 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2e924d4f, 0xffffffa1, 0x7, 0x1, 0xa8dc, 0x1], 0x6, 0xffff8001, 0x85d, 0x1, 0x3ff, 0xfffffeff, 0x0, {0xfff, 0x6, 0x4, 0x3, 0xfffe, 0x8, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x9, 0x40, 0x6, "5deae121dc07177d4353d5e1e9db14b18030e4a0ef4f00f312305ebfa0e2bd91"}}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1) uname(&(0x7f0000000080)=""/67) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 17:15:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600), 0x0, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a0102004c743c4bc6c870edf5701e54b834e300000000"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x2) [ 955.727999] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:18 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2e924d4f, 0xffffffa1, 0x7, 0x1, 0xa8dc, 0x1], 0x6, 0xffff8001, 0x85d, 0x1, 0x3ff, 0xfffffeff, 0x0, {0xfff, 0x6, 0x4, 0x3, 0xfffe, 0x8, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x9, 0x40, 0x6, "5deae121dc07177d4353d5e1e9db14b18030e4a0ef4f00f312305ebfa0e2bd91"}}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1) uname(&(0x7f0000000080)=""/67) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 17:15:18 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x4c, 0x8) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/anycast6\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) dup3(r0, r3, 0x0) [ 955.847646] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 955.861004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 955.890353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:18 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2e924d4f, 0xffffffa1, 0x7, 0x1, 0xa8dc, 0x1], 0x6, 0xffff8001, 0x85d, 0x1, 0x3ff, 0xfffffeff, 0x0, {0xfff, 0x6, 0x4, 0x3, 0xfffe, 0x8, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x9, 0x40, 0x6, "5deae121dc07177d4353d5e1e9db14b18030e4a0ef4f00f312305ebfa0e2bd91"}}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1) uname(&(0x7f0000000080)=""/67) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000692600002ca40000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad430100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe2314e887efecdcb7381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be000000820102b19000000000000000009095601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7c2cd12bc34b0fc0271124cfb5279195f7062351edf77c71294bbfd85878726c49eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d44f92991a7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830db4713e5ce6cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e078e3a638c4fdb8562eb85173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f30000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 17:15:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739", 0x16, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:18 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2e924d4f, 0xffffffa1, 0x7, 0x1, 0xa8dc, 0x1], 0x6, 0xffff8001, 0x85d, 0x1, 0x3ff, 0xfffffeff, 0x0, {0xfff, 0x6, 0x4, 0x3, 0xfffe, 0x8, 0x401, 0x8, 0x1, 0x0, 0x1ff, 0x9, 0x40, 0x6, "5deae121dc07177d4353d5e1e9db14b18030e4a0ef4f00f312305ebfa0e2bd91"}}) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1) uname(&(0x7f0000000080)=""/67) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) openat$hwrng(0xffffff9c, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1) 17:15:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x4000000) 17:15:18 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') dup3(r0, r1, 0x0) 17:15:18 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739", 0x16, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 956.035416] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 956.082466] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/234) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0d00001300ff0100000000000000000400000008000340000e0000"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2a}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x804) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739", 0x16, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB='U\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0102ffee0000000000e20a000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000020", @ANYRES16=r1, @ANYBLOB="00002bbd7000fedbdf250200000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x401}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4800) accept4$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c, 0x800) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r3}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r4, r5, 0x0) 17:15:19 executing program 3: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') 17:15:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0], 0x1c}}, 0x0) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add1", 0x21, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}}, 0x0) [ 956.340904] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 956.429893] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/234) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add1", 0x21, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:19 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x3, 0x20, 0x1, 0x1, 0x33e4, 0x7f, 0x1, 0x20, 0x1, 0x2, 0xed1, 0x5, 0x0, 0x9, 0x0, 0x26, {0x6, 0x7ff}, 0x9, 0x8}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000340)={r4, 0x5, 0x3, "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"}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x22a01, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x13, @l2={'eth', 0x3a, 'veth1_virt_wifi\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 17:15:19 executing program 1: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x34}}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}, @FOU_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80c0}, 0x4) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:19 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1, &(0x7f0000000340)=""/92, 0x5c}, 0x4}, {{&(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/148, 0x94}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000000640)=""/102, 0x66}], 0x5, &(0x7f0000000740)=""/118, 0x76}, 0xfff}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/211, 0xd3}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000a00)=""/140, 0x8c}, {&(0x7f0000000ac0)=""/104, 0x68}, {&(0x7f0000000b40)=""/80, 0x50}, {&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000cc0)=""/139, 0x8b}], 0x7, &(0x7f0000000e00)=""/108, 0x6c}, 0x5}, {{&(0x7f0000000e80)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000f00)=""/253, 0xfd}, {&(0x7f0000001000)=""/249, 0xf9}], 0x2}}, {{&(0x7f0000001100)=@in, 0x80, &(0x7f0000001680)=[{&(0x7f0000001180)=""/37, 0x25}, {&(0x7f00000011c0)=""/38, 0x26}, {&(0x7f0000001200)=""/205, 0xcd}, {&(0x7f0000001300)=""/20, 0x14}, {&(0x7f0000001340)=""/204, 0xcc}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/209, 0xd1}, {&(0x7f00000015c0)=""/172, 0xac}], 0x8, &(0x7f0000001700)=""/151, 0x97}, 0x4}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/7, 0x7}, {&(0x7f0000001800)=""/191, 0xbf}, {&(0x7f00000018c0)=""/79, 0x4f}, {&(0x7f0000001940)=""/255, 0xff}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/60, 0x3c}], 0x6, &(0x7f0000002b00)=""/142, 0x8e}, 0x3}, {{&(0x7f0000002bc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002c40)=""/188, 0xbc}, {&(0x7f0000002d00)=""/151, 0x97}, {&(0x7f0000002dc0)=""/244, 0xf4}, {&(0x7f0000002ec0)=""/168, 0xa8}, {&(0x7f0000002f80)=""/173, 0xad}, {&(0x7f0000003040)=""/210, 0xd2}, {&(0x7f0000003140)=""/212, 0xd4}, {&(0x7f0000003240)=""/68, 0x44}, {&(0x7f00000032c0)=""/70, 0x46}, {&(0x7f0000003340)=""/10, 0xa}], 0xa, &(0x7f0000003440)=""/140, 0x8c}, 0x9}], 0x7, 0x40, &(0x7f00000036c0)={0x0, 0x989680}) r5 = dup2(r4, r3) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000003700)={'ipvlan1\x00', {0x2, 0x4e21, @multicast1}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x4c, 0x30, 0x103, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}}}]}]}, 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe7, 0x0) 17:15:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="270000000001000000000000000000003d81ca5c00000000"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000200)={0x2, 0x3, 0x81, 0x0, &(0x7f0000000140)=[{}, {}, {}]}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x4) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x7032c0, 0x1a0) sendmsg$SOCK_DESTROY(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500100001500000128bd7000ffdbdf250801d90001004c30eecaad41214eae52d36618f1fb05a12296f53dc992782a98489699ff636bee08b41efc415c8cccbb5c2258b21c60b54a92e4feade8c980626cd051df9194ccab93da26e336e7926849e278324a2dff9ce73ac321a10ef1dd6b2d2b55e336b94d942df5a6d11a659188484515aee3241390c4a64b8f7dd81dd687b2310d29fa35826692a1d81ec1f415a0ef6393d2a84f30672161b9bea8d47f1323add41b0237fd10dcf6338c287190833bedbdb2276215e67141822456eee0dbf9b4f974c65240f53c47dc87230fe767346d4998581f9b56130000005d000100dc6ec8a4a2812cadd225dfc8159fec277ff211b9ece477d19d8da8e0fe2d4364276a82d5618480a25eb1a9779c7b20b3fe8839027be7e3253076e675f4ac664d06ae43f9b86ccf69ab0f3bf9930c7d705304287ce7244f86040000000000b6d1485198d967aea12ec0891082ee10918971f1f7a3e287838e7cb6dc002e401589c185b37358ae39cd11baed6faee893f6bba98ffb8c2607c97aa9d888d137e1de93ee2ff2f76ac7a499ccb019909f44f8aed02718904b7df5a101bb1a796f14b394534665e0a5d34805691566fa1bbf7e09f7c10923dfffb72bec538cc3373086509fb3f449173b0450bc0634540606978cb3633456fa53f450fb613f204baa05240fb0aaaad764546965232025"], 0x150}, 0x1, 0x0, 0x0, 0xc084}, 0x8000) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x1, 0x455c, 0x401}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$PPPIOCDISCONN(r3, 0x7439) 17:15:19 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x8df, 0xffffffff}, 0x10}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add1", 0x21, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 956.959932] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002780)='/proc/cpuinfo\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000027c0)={0x0, 0xb06, 0xe8, "9f4c4e940d864c8efc8f7f5247cd7de6c5cb5039d0ad0a9e8884f0b3c342cb5261f94b1617f697cdc2c1d3c0eedeb34d03aab53211d67df4067b36f8970587ba70db41b7f90f034057fcd60f80e2842872432179da1607d702d0ca07e81ba2fa91c6dcff64c68572bea2546e9031c420144184adc1415db5c4c0eb13d5609a500ef5fb3428ab183e52e348e71f9433bccd2e495bfb974ad19413bee1d7ab4a186704286e019e5b54c2f055a20705d106a5fac3ac46fb32e44d24efd35c9aeb9abe82ce9b7009a9362182f5f1fb6c48d4b8dc9aa28fbd42e769a2f7c86ae6eee0ef6f809ddd04f4bc"}, 0xf0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b070fd) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x23, 0x2}) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aa", 0x26, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:19 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xc, @pix={0x9, 0x4, 0x34324d59, 0x5, 0x80000000, 0x5, 0x3, 0x0, 0x0, 0x4}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:19 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aa", 0x26, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 957.048588] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 957.108957] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 957.160021] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:20 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x200000000000000}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) fsync(r2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x200000008a105d00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f00000001c0)=0x2, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) tkill(r4, 0x3c) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0) syz_read_part_table(0x1000000000006, 0x2, &(0x7f0000000100)=[{&(0x7f0000001380)="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", 0x1000, 0xffffffff7bffffff}, {&(0x7f00000000c0)="19b893d503dc6ee6dc58ad9ee50e03937c4e000000000e95769f4925f17ba034c7fd1a897b2620eea1c80072d07a7a7feaaefc4d2b39224e527b0000000000", 0x3f, 0x3}]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:15:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x4, 0x6, 0x7, 0x0, 0x4}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aa", 0x26, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x8, 0x2, 0x5}) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={&(0x7f0000000380)="9004382feeba0cbed1e7688e8ca83f4327db978499e7525289a6fc57d7ceeac8bd677fb2dab42e728bbe5b5f5b36f2798af201fa7a119670f16295189218d7f98d70f5f93488199f77797914931e1f", &(0x7f0000000400)}}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r2+10000000}, &(0x7f0000000340), 0x8) 17:15:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000380)=""/234) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) accept4(r2, 0x0, &(0x7f0000000080), 0x800) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 17:15:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc6277", 0x29, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:20 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xfffffffb}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000130001020000000000000000000000008d0800030000000000", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x0) [ 957.886292] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:20 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = dup3(r1, r2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) poll(&(0x7f0000000000)=[{r0, 0x8084}, {r2, 0x411}, {r4, 0x39}, {r3, 0x180}], 0x4, 0xfffffffc) 17:15:20 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc6277", 0x29, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 957.968607] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 958.058460] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:21 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x3) dup3(0xffffffffffffffff, r0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 17:15:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x1ff, 0x8, 0x4, 0x20, 0x100, {0x77359400}, {0x2, 0x8, 0x79, 0x8, 0x9, 0x84, "5ebba698"}, 0xaf3, 0x3, @userptr=0xf7d, 0x6, 0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r4}) write(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17:15:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc6277", 0x29, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:21 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) write$binfmt_misc(r3, &(0x7f00000004c0)=ANY=[@ANYRES64], 0x71) dup2(r1, r2) writev(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="050000000237eb3ccf807609ebaa57b5cb430500c11c329d7e26f0d330213d72", @ANYRES16=r4, @ANYBLOB], 0x3c}}, 0x4) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRESHEX, @ANYBLOB="01012cbd7000fedbdf2502000000080005000a01010108060500000000002600070073797374656d5f753a6f626a6563745f723a6b736d5f6465766963655f743a73300000001f00070073797374656d5f753a6f62fbe663745f933a7661725f743a733000000a000500e000000214000200ff01000000000000000000000000000140b909a0e100ccf3a2f58bf48aca150fc46f8d350e"], 0x88}}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r4, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:sshd_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x1) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 17:15:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() timer_create(0x0, &(0x7f0000001380)={0x0, 0x12, 0x0, @thr={&(0x7f0000001440)="f47e6c56012b7f079c009907f0e1fd3f8b3e77f040bd0efe5920a0bcd648d6ebf3523f56d48419e0f1683ce077d6783672474bedb7a83c3a0534c4212a2c2af9e38249c5f6ef37b43c12da4be800c9239e53b514749a622e9199e313df4656b092ce1cdbed3a9d755a1277927e6809f211808e6fdfe8a4b0e415a213e7ca50ff32e314eacb3be034d0e2023f2e51ddf9f859360f5fa5330cade343a60a4709e0138bbc7fa6e6dd58184bddb0cd75ba48", &(0x7f00000002c0)="f807cbab2d3619e98aecf29a49490b02280d0b4d1b5e1f4f1cb75393080000f7ffffff00b895ef6fb4915a46"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendto$inet6(r2, &(0x7f0000000380)="374d22165fc26f2f9fea2b9f05ce86ba32d074a864e9d2324142536c788ee95fad3b315801c10adef32e2c49fe4db06e8df92df08eb1ec82e6ddaad04ab845a555f44adcb14ba39df7a5d0083bcdedf6007ead00874b4e46e7d225a33a6cff2d9bd32c8c1ea88a7f931c1d581e7594a84f0c4026ebef7034084bc0b0d9ba4d48b7bfcc425fffc60bb26e494981f67df96dcaed96c2def30722965cfb84eca889cf0ffc5d618ee505b42f7a482de24c5e40a5c3b9a778c5a559f12e4ad6521d12c425e92ab9f20207ea892f0bf71f58540f5869f4a1601bd408550c3ed9e4b9fd48684617d3c9b114143308b464b3cf9be5c37ec4d32c10c5dca194f87f8aaee2e8e6bce3fd828ab37910a61a583d1a68868bfb870f726257a3d14821363ebe372b93438faf30cfa1f7974987bd37e9bb7b0d623094820ee3629db901324bd34d379815ed6635a5e61da086b64a9fe7fe51c0c72eeed90d573fece0c2fe80b512d71bc983bdbfd64b70a40663a26e980ca40139886158de5342ec614b58babde2c3998bd0d2df1c29218713dd64659de0edc73dffbf6475f59a1ad5fa5b3b036bd0232cf99e42e2c699ad45fd78a0ff98e004fbf854367b1a85133a097c97ef8ec807fa40916c25853cd67197ef4c19d1d983f6a76d51b20ebf39193443270d1361cd29515d2fecc4144c7ce8d55e7da04f9bf1ec142ba180feddf07033178e84c9584e3d1f328746b7552b86f97a05c07959d71e781614a38a729e170f5171a2822603750123068177b36f3e7f187deb6ffd6b5283a2e95ef685b0f067695e4d8f9293ff188ffbc83b31454951bde49da0a66187c6f2acc9d3c157f830c26f1f4b74d726f15d09ad416b8be591843be7e24bc42e6d90f1188ec3117ef18ccd4548d5593b496b37d1826f36609908294adbf08a1a81bf610207cb575d96aa0af2d438a3ef4b62016c9a6a2310c8493203ea7d24b345ec89ca99bf50806977ce9a6b0c9119a1dfb60f36a36c597f10403e9a082ee62f02a12dd0fc864a523c95d091a6c556a7345c657c08839a2ac1207add4e63ec2f50360f5a714800d47ee74cb04cf8537bf93156af79251d528075ce2a8c11f6b6e5d8e138e6a002d9168cc9e5628491117b1eff2cba7d963667a680faeb1aa4d51df80ed683f249223815c654b5153f1c34b6fd91ff3914a3370444100e57672c2954d869cf29c4d400a0cd845c895f0951a525d97adbb0364a2bf6ab47fbe79954b5ad7e8a8dc2244fbc667a26da745e3c31e8afd84bceb6db474953aa06eebd584f996e3b7068ab6d5661e2f0ddf04f27a57fa38e82a2fd7ea85cb39c6692c958ba41597a2d21917d5b091fb401e2731b38f96f9f22f3ef0184729ca494f2728033f8fc97efc4133cf203d826d900c64c2cc2b5e3daebafef1c8398cea685ba1d29f77f5203ded62d2cf19e0947022e1216d0bca06ec0a1d316c851ac444d8af714b669ea82a2b5420f3dd624cda262db6a15b7aa7d8f4ef2e8664ddc0af1e2c489dd3845eec1bd447b074e243d78d4c2e10d5b526cc8a79fd9656246a1296bbeb4b5db82706d2b32bbce9c5f4b779ab46f0c2e9456233ed9c01a265b7b02751ef430987891eb02a7ecad1caebcfd0a9fd62c61eec80ddba23b2b64e6785d16489a286d60c8b2381529d7dbe7aa1e7db9218acbb485c2268f0bf6084478a3e3fbf07940fb86b3656d9df4d08ac358efd205fcace560bea6cc643e55e4e26f726533c6bd801e147fbd47cc48f6dfde5ea952b56833f889cd3d87cef362405ac0284f338d0d417195bae2f1bb3cbdf1e7bb8ac361a362cb270831176fc2bd8deeb8dcb08f0d21d7386f6e82d4e3c6e62d40074a5ad54302b2f580aa45040bfda503093a113ef4cfcce4c3790c1333b2263e2906e6bbe01982debe5855b2106cc80ad13c7ea35340468fec89b15b991c239c14642e00a0c2eda001e55aad55015c7295a8f2ce972f39caa3a67cabed8d7d931d20eb160ec853a828e7993753921a03aeacb05338ea45f1688fe179259592cd462c28a7746cea3c593ae5334ed647d2918a59f5785ac3c75c8f5392a382f48921caf31cabbcfd9063493bcc715cada57f84863aa7840e6232df64305941aba34de39f084fd4efc7069b774ee49d37ae43c1f1d99ba3f6239f69bfd0538f8265a7f2c110b03eef3d16958d22ce874aa2fde33d8fc4f448821251cb71a430a826b24b50b10010d9bce20b2669d53866603903e24999573ea5f858d01e05d249d1c6be1dec29a4bfe8675c48b298edcf4f36a958ea9ab747afcf5d619db43f7edfda8edced63f4145d573d35f6a8241337537d4fb1a25504fdded70a2850b8ddc7874d52705ee5222231f082879dcf5107715666d9d8cb0cceaf770bd6af2754fc1009ff1c1be08a1f56cad682a29053478221af9814a09ea60af59930aae88ab7dec01faf18b63383e183ebce9418a1e8bab9438507ad64ea3e80f7f8c97cfb83d1e0734f478326498e97c5dd8e6f8946ccbb4367bb87ea199ee282216c625658380e75779cc233011aa7ae3773368b73dfe8ee47c315ab8d31e720517abe594f9ea9c89d4e6ac0adc16835ade01795dced6fcc6ec580cd21882b02064834e2b915a137dad26695c674ebbb1179c5fa990453cc5f5dbf5ea2da239906a37fa95912974cbbb5c1bf78c63f201f2aa2f75b8f6a9bfdc59b6483df2c20fbdcd5641a81ad5392b3554a85a724dc1625f5bce601998b473f2acae59c3d03b639c30e7a0d581246f35aaacb2605291b43773225388fac525c627076a808256f9fc62c67acb0214f5a0241a08c65a2ee32065b2060d18eb6de5181d72a5e2fd85b12acbe08a5d0514d5a558dd2d7b84b8ae480aa2f8134ab3a8d748ed96f10eb73203dcf73f463b8d4a5c343538415d0f8b435e8e39203edd15f8990916d3951b968c0ac3ed2059904c1a60ed66db392ad2764d9d425e470215ccdf38c25988eef8bbae3bf8c781b43b547d3bc0079e6a480e2257a077ad27ec98a343033bb0ea1fc2ba18bc6647c9d4dfc75386845678ded22a63d502710affe43d2ca91b0c54fd3c9a9a7df1b9c0d9f58478e0696f63443369e1e64f7edeaf2fb42de7743e2e86fc682a51f86b5ebff133142e4ef9ba3091244236642acfd3a0a7a2888a3dd5ac2570db4147d104771bfc7b4defece93b2fd7fe5fb61c4a55fff1f77978df2a70fcde36db341ed9c0174b2c7ade5cca8ad1a1e156f7fa81d59290504ddae6772dfe091b32e9e508cc4accb59aff2b37cc668bff1228c7858734bce39ecb5bfb9836b14a802421ca405e36a137c3cce6a5b517a6681570c4768ace58fce657d0fa9ab35ba47742bf447a65c8a520326fe78d1879f03f433a22dcee6b63e22e649fbd91b34ef7e1695b1cba4dbde6b2f452c700b89790d279148da2e5c58b9c026e73dc05005ee767b70ab053aff3f90dce5afb619734ee11cdbc0e072900ddf2b16fc4b3f553fca547fb86f2d9989bda8e308cbd6717ee4754aa1ed54dbeb931b4d6225dc6f22f76dbdb3d0b949a7ce7f521de6774f1242abacf49ff4d5dadba4f8cd7f2d398e151aefe4a74354adb3e863f6cf7df9fa811866e610f0cb631f8fb727287628b67203c7244f0b2df8f1dfa50519206081fbb2fc3b55d47f1f9179a92e14701272e77b9a13d734dcdbe7c615a4cbe537b8216e26dc0dc9425598e117195a1f36d2a4679df57ebc4719f0628f53dab7eff3aeb869d680cc9b3e76473b48447b02bbc8d96671216acb0f1b9a7fe3bcae38dd4f761e415c121430249705d9aedd8f1311e93857b09c10eb67e88ac111e6347610d34963382bd28e2e1b97c86f42918e929763ae7de1ec77b15f0e3c7653ba28bd93deb3e8a3e9a82ab9d48494913aed1c3171bfd9559a4378813df49f750480d1f6b1907d62690ef6a148fbc4c693eb20e103f483a58acc0e1fda96ece4242678071532c21f87369622aee59cef04aee6802b9829f5e0660728a2fc4b8eb8d4b4ad0d414dd7ae0a53b336b2b92e9d70c96c72c4ef34d24db34477291410d1d717467bb98a6ec1ce82f793f9117e27255522e2d9a4bbae0ffd45fb352fc99edef0fe91a3f95b6baf8ccf42210709553f7f736434302fbe4fba3db0fb3967087a143b2534aa0e1f8ac99e06938cbff0548255598955d84ee39a80e8803f2f359c5a7a951de67e028dfb1093c07c595a5f6b5879a5ed8b2ef98da7ed1e687236c530bf654964bb03d2c1ac392a7066d1d1bd6f5e838ec70e18ed5729df0e0e9e627f640ca01b320f5a6960bffe44a5637afc41a1b6ca7da2f9ebdc51fe1437147408fba1e46614b269f8251b26d64223ee7af7c085605ca844de792a79bb0e6ee823302219ed04e07382548bc7d8bab0b0427160defa977e7d8aa5d11d290940e01c756111b8c50eaef2ab12f6564d9ee7f1072b22fdde1c75b7e6ee63760a79a83dbb09f2c96f1ece9fb46c23ab577f11e1b823e0ae27545c8f31d45c41678b50f27caeba08af4e4fc9636bc56b4cd9eff5ae4ffd6886e90750df42d178c47711c2a8316752982de6c4b199429f7502da03f76f13da2e98f2ef8a646d786b4d0918d42ef97289c9a541c9ef32996a2eff9e963187b430cb1e6d4090f5d8a8432147dcb0ba95a3f733b0f330d7bc9d21b04bb8bbbc3d2b1d7642f421d1e5791c734d45a5dae19d0cd11582a5c041a6c5a70b6ba91fc6538b63c906619279906be08259aaa8284904d2fdb2febf0af6fb8a1995effb6f874759f5c0482b3ddd3b82a6f302de4164a5751ed2a095e4bcf560c1206ae4b643911dcdcc41feda7a7316ee0739ee418515b39765cb8a537ab95f29695332e7a9d625f641b1b7b2642c33beeff971b85d31a710c6e38e8adfd854bd64409eeedbfd0293408c7fd53d23f1367068d96c2a556cffe4d85450a0e9cc33a582d52201a72b2bbfe7c90c3e54f2d8959a696f45dd24c232ac6c77cdaacc7c7c095e2930d883e3f1c4289aa1e5433bc4cbdb95d4bb95bd73d41cb4c8fdc676a0660592e38691b399737007f1397c2be0d5a23b3fb91887d5b59d2a40d987cbc7eb93651097997803a00d33786bf66771b50edac9254d100230d2f94b61284fe0dc39703662f22a27910dcda9587bee26360b2e7ee1b1b9b4bf8dd0a05737c448aacc5ce35e91516fd1b5cdf931fd5b6305d0f869ad8942e9f21840fe69ee0eae8c9a4ae9c9f32dc2df8798c163dc904b824037c81d587a81098a7262156ea51fcdf40837dabc4ce1e30d97cbc0f5ca1e75f963fc8aefada537e2cd732415f8619366b8889f0c52ed484f5eca4826883c974b4540cf46df98e293208b4f36abfb754990c3a26d55978eedd4031e9c482b36110e7880a1e64eb630747391dbf28ac134627fdb0c7400454de02cd9c06ea808b89ec0ca4a434ddc13e50acb3d749af4b0d1d332a8a3ec432d097749f15bfac05d1c2eb6d86368363a786177098d98f9693fa6e8938ea0f8097b3c6ca905009b71dc676912e55aff4eabee5aa433aae273374bf523a6db85a406ed14a57c69238c6968b57413f730135b93a03d680582cb2484cd7790a47b6ba8abdfeb47b957b4e34fbcc6a62c81e97d944b7d727f47f1c77e211219c3ad4667ade5bc62a7fd0e59aeacf98fed77c7ca8c2c811534022c3cf51957bbefa4125d408a131c3250d4ebce3c37721e779bc91729728fdc6f7ff51c66c688915095f84cbf0d25a46c2da6c26bb333392519cdac57db0189c924ed0b7a14e273ce8c6d9865c74b5b642d5eb8ec", 0x1000, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @ipv4={[], [], @private=0xa010102}, 0x3f}, 0x1c) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:21 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x46000) lseek(r4, 0x4200, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1}]) r6 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRES64], 0x12da00) sendfile(r4, r6, 0x0, 0x8400fffffffb) sendfile(r3, r3, &(0x7f0000000100), 0x8080fffffffe) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 17:15:21 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="d4010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1d4}, 0x1, 0x0, 0x0, 0x10}, 0x14044841) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r4, 0x0) 17:15:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc627748", 0x2a, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 958.785071] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x8081) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 958.828362] audit: type=1804 audit(1591809321.539:59): pid=26155 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir607539062/syzkaller.4IZPFH/2109/bus" dev="sda1" ino=17527 res=1 17:15:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x1, 0x5}, 0x3, 0x7, 0x7ff, 0x1, 0x28, 'syz1\x00', "dbecf084551f8ad7dd16a6e2cb97b6d397810e9232f7bd89702c5b913cb021a7", "54240e36694f3da5c9284a691d0ec725832323e9bcb13f3694752c56f8b91e5a", [{0xffff, 0x0, {0x2, 0xfffffff9}}, {0x7c, 0xff01, {0x3, 0x9}}, {0xb96, 0x8, {0x0, 0x4}}, {0x100, 0x6, {0x2, 0xfffff232}}, {0x56b, 0x9, {0x1, 0x4}}, {0x3ea, 0x498, {0x2, 0x200}}, {0x100, 0x2, {0x2, 0xffff}}, {0x4, 0x9, {0x1, 0x7}}, {0x10ca, 0x2, {0x0, 0xfffffc00}}, {0x6, 0x0, {0x0, 0x1}}, {0x5, 0x6, {0x1, 0x400}}, {0x1, 0x9, {0x1, 0x7}}, {0x7fff, 0x0, {0x1, 0x401}}, {0x3, 0xf5e, {0x3, 0x4}}, {0x401, 0x0, {0x2, 0x9}}, {0x3, 0x0, {0x3, 0x38dc62d4}}, {0x4, 0x800, {0x0, 0x400}}, {0xeeed, 0x5, {0x0, 0x4}}, {0x1f, 0xffff, {0x2, 0x7}}, {0x92, 0x6, {0x3, 0x20}}, {0x8, 0x4c6, {0x1, 0x4}}, {0x2, 0xfffc}, {0xe4db, 0x5166, {0x2, 0x8000}}, {0x7fff, 0x0, {0x3, 0x5}}, {0xe89b, 0x8, {0x0, 0xc7}}, {0xff, 0x6, {0x0, 0x7}}, {0xd4}, {0x8001, 0x68, {0x1, 0xffffff00}}, {0x1f, 0xd1a, {0x0, 0x4}}, {0x0, 0x4, {0x2, 0xeaf0}}, {0xffff, 0x5, {0x3, 0x7f}}, {0x3ff, 0x6, {0x2, 0xfff}}, {0x9d, 0x101, {0x0, 0x9}}, {0x8, 0xb18, {0x1, 0x8000}}, {0xe9e5, 0x6000, {0x0, 0x7fff}}, {0x400, 0x9, {0x0, 0x4}}, {0x80, 0x5, {0x3, 0x1}}, {0x5bf, 0x1, {0x3}}, {0x6, 0xfffe, {0x1, 0x9}}, {0x4b, 0x101, {0x0, 0xfffffffc}}]}}}, {{0x254, 0x1, {{0x2, 0xfff}, 0x7, 0x7, 0x0, 0x1, 0x5, 'syz0\x00', "665af56f918c9fd3beb28e471eaec41cb50737127f52f6a43675e23840a4b333", "07c0a601a499d67e5ea297f77a409763097776ad669a3ed58ca568882c55ee0d", [{0x3, 0x5, {0x0, 0x80}}, {0x401, 0xaf59, {0x1, 0x8}}, {0x33, 0xffc0, {0x0, 0x4}}, {0x4000, 0x1000, {0xd8581d93aafea392, 0x3f}}, {0x5, 0x0, {0x3, 0x9}}, {0xfff7, 0x9, {0x3, 0x7f}}, {0x4, 0x200, {0x1, 0x45}}, {0x1d, 0x6, {0x2, 0x800000}}, {0x7, 0x0, {0x3, 0x1}}, {0x200, 0x42, {0x2, 0x5}}, {0x9, 0x2, {0x2, 0x2e}}, {0xc78, 0x101, {0x2, 0x2}}, {0x2, 0x0, {0x2, 0x2}}, {0x9, 0x80, {0x3, 0x8035}}, {0x2, 0x9, {0x3, 0x5}}, {0x82d6, 0x1, {0x3, 0x400}}, {0x8, 0x3ff, {0x1, 0x8e5}}, {0x5, 0x401, {0x2, 0x1fe000}}, {0x12, 0x7ff, {0x2, 0x80000001}}, {0x3, 0x0, {0x0, 0xf7}}, {0x101, 0x7f, {0x1, 0x1000}}, {0xd1f, 0x8001, {0x3, 0x7fffffff}}, {0xf6a2, 0x8bc8, {0x1, 0x6}}, {0x7, 0x3f, {0x0, 0x5}}, {0x1, 0x2c1, {0x3, 0xfffffffe}}, {0x332a, 0x326, {0x2, 0x3}}, {0xfb7b, 0x0, {0x0, 0x9}}, {0x401, 0x7f, {0x2, 0x1}}, {0x1f, 0x0, {0x1, 0x8000}}, {0x0, 0x4, {0x1, 0xffffffe1}}, {0x7e, 0x4, {0x0, 0x1b333a86}}, {0x4, 0x800, {0x0, 0x5}}, {0xeb, 0x8000, {0x3, 0xfe}}, {0x4, 0x8000, {0x3, 0x2}}, {0xd6, 0x2, {0x3, 0xffffffff}}, {0x2, 0x2c, {0x3, 0x3}}, {0xffff, 0x3ff, {0x2, 0xf0f9}}, {0x0, 0x1, {0x1, 0x7ff}}, {0x3ff, 0x1, {0x1, 0x881}}, {0x81, 0x4, {0x3, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x80, 0x20, 0x4, 0x5, 0x6, 'syz0\x00', "06d48f99645aa2fb5526ae57f77d91cff6b9f9134b6a3123be45f2c899d72a9b", "ae0b3b0d70e913cd631e149d3753f3b1585cc4da0beafa6c1e2566ff50c70ec0", [{0xb1, 0xc592, {0x0, 0x1}}, {0x1, 0x6, {0x2, 0xead}}, {0x6, 0xaec, {0x0, 0x3}}, {0x6, 0x0, {0x0, 0x1000}}, {0x1, 0x9, {0x3}}, {0x800, 0x7ff, {0x1, 0x3}}, {0x101, 0xffff, {0x2, 0x3}}, {0x5, 0xff0, {0x0, 0x1f}}, {0x6, 0x3, {0x1, 0x80000000}}, {0x4, 0x401, {0x1, 0xda8c}}, {0x2, 0xff, {0x2, 0xffff985c}}, {0x2, 0x5, {0x1, 0x7}}, {0x9, 0x59, {0x1, 0x8}}, {0x81, 0x2, {0x0, 0xfffffffa}}, {0x600, 0x7, {0x0, 0xb87}}, {0x8, 0x5ef, {0x3, 0xfffffffb}}, {0x6, 0xf5f2, {0x1, 0xffff1f24}}, {0x2, 0xff, {0x1, 0x9}}, {0xff4e, 0x40, {0x2, 0x7}}, {0x3, 0x0, {0x2, 0x1}}, {0x7, 0x3, {0x0, 0x7fff}}, {0x8, 0x6, {0x0, 0x800}}, {0xfff8, 0xdb, {0x0, 0x1000}}, {0x3a, 0x7, {0x1, 0xff}}, {0x6d2, 0x0, {0x0, 0x4}}, {0x5, 0x8000, {0x3, 0x3}}, {0x7, 0x7ff, {0x0, 0x7fffffff}}, {0xf9, 0x101, {0x0, 0x800}}, {0x400, 0xd2d, {0x2, 0x1}}, {0x7ff, 0x6, {0x0, 0x3f}}, {0xff, 0x4, {0x0, 0x6}}, {0x4, 0xffff, {0x2, 0x9}}, {0xff7d, 0x6, {0x1, 0x80000000}}, {0x7, 0x1f, {0x1, 0x97}}, {0x3, 0x6, {0x3, 0x2}}, {0x9, 0x3f, {0x2, 0x7fffffff}}, {0x2, 0x0, {0x2, 0x4}}, {0x101, 0x5, {0x2, 0x8}}, {0x2, 0x0, {0x2, 0x9ae}}, {0x2, 0x3ff, {0x2, 0x1}}]}}}]}, 0x710}}, 0x40000) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc627748", 0x2a, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 958.907689] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) 17:15:21 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc627748", 0x2a, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 959.057982] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 959.190119] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x1ff, 0x8, 0x4, 0x20, 0x100, {0x77359400}, {0x2, 0x8, 0x79, 0x8, 0x9, 0x84, "5ebba698"}, 0xaf3, 0x3, @userptr=0xf7d, 0x6, 0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r4 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x0, r4}) write(0xffffffffffffffff, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17:15:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x8, 0x1, 0x1, r2}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x800) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=""/49}) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xb, 0x20}, 0x18404, 0x402, 0xffff, 0x7, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 959.432966] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() timer_create(0x0, &(0x7f0000001380)={0x0, 0x12, 0x0, @thr={&(0x7f0000001440)="f47e6c56012b7f079c009907f0e1fd3f8b3e77f040bd0efe5920a0bcd648d6ebf3523f56d48419e0f1683ce077d6783672474bedb7a83c3a0534c4212a2c2af9e38249c5f6ef37b43c12da4be800c9239e53b514749a622e9199e313df4656b092ce1cdbed3a9d755a1277927e6809f211808e6fdfe8a4b0e415a213e7ca50ff32e314eacb3be034d0e2023f2e51ddf9f859360f5fa5330cade343a60a4709e0138bbc7fa6e6dd58184bddb0cd75ba48", &(0x7f00000002c0)="f807cbab2d3619e98aecf29a49490b02280d0b4d1b5e1f4f1cb75393080000f7ffffff00b895ef6fb4915a46"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendto$inet6(r2, &(0x7f0000000380)="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", 0x1000, 0x800, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @ipv4={[], [], @private=0xa010102}, 0x3f}, 0x1c) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000006000010020d0000000000e214a8f5fe4cb7b8cca07ad20000306d6e6df6f50f2ddde9519e7d5f69e0316b7f7f5065226d215bbddb32cf08a854204e4c3e83f6f23b0f9b6394188d5707424c7be3df50ef005d35b6d1094209fae98966a5d01053c1ecd6a9456dba001d63e0bb4868b94616e937f4c97c830e29da27da1950575fda00c5d6ea0928e8d399b6769447bfcff9ac75e2b261f4b1e59b0929fe4e39abedce41205866c374b8d17844d76638fed39e4b6826e6d6666b5b228949766d41e19f4944d9a7eae525469200cfff74ec358177bacbc811888b858af5cf2c0a7c7df9e1c1a2bedccd338d106b960e7db007025280456e0acdad4b67b86f1482d3"], 0x1c}}, 0x0) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f00000003c0)="8f0e9e29ab8eb7e5cb1fed8979d2bd6168314b9cdf8acc3f3726443e84a3d9d819cb6b27e04bd30e74300a3f5dad44ff332b2ac0157b7b1ba2138fabd2eee07412731fe4f9a5836c58", &(0x7f0000000440)="20700504f0317cdca22e1e4bcc9434494c8a675b06a5844f0a70fd30f3aca7346e562843d8f8cb531498ffb653b219e0f06b45b3f43fa40976"}}, &(0x7f0000000380)) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000180)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 959.646636] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getuid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd29}, 0x14}}, 0x240040d4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="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"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="00000000000000000f00000009000100727376700000000034000200200004000000000000000000000000000000000000000000000000000000200008000200000000000800010000000400"], 0x64}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000040)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000140)=0xe8) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)={0x5d0, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0x130, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x12c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x87f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',{]'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c0f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'caif0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '#,}.^&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}]}, {0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x184, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x57}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '$++\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0x44, 0x5, "9dfbf436bda6b66aa69dcf7bcf7241f9b0089d9b9318a26e39987300981a6815fa5575042174878df4a165b30d7e3214d3568db2f45435aa93cf163f3cc1a4b5"}, @ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',\"(&]&-(++/\xae-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "15599ad519c3d8a0e87462b6e39d53dbb38ba6cfb5d1"}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']/)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '\\.},#](.%+(*[:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',-(/<$\xa3&\xfb\x00'}]}]}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0x220, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30272133}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x12.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',{]'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\\a\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '##@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8c\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0x2d, 0x5, "3d04086930db09b63e8551e4d21a2252bdddd79359508e379b0af92c88f26c5fbb066f4aeae604e44d"}, @ETHTOOL_A_BITSET_VALUE={0xd7, 0x4, "647b73d19bf4ce79ed855c92b66bdfbdfd2b2d57b14cc6800fc3f8409116b37b6176b9da4497490bdc347258cc2b1e0f3d2a251012ac183115877255a6057828004347f0abe5f7d6052261769582fdd2abdcb83757d2c07cbf40fa60c62f5e510afc1d5e15e4ab7a8ecf54bcfb61bb2bf93cc04437baf33c3ff1b90b661333c38da13030d9978b8f0453cc1fed6b4009b9c4f149c3e4127e79dee97526e3d95d9a17eebc570c43dc1d2498f6b6b18cbfc3e9a6ca0428c8d568fe9d292999ebd6a67944f778bc716cb0ccd33ef6928c2fbdad1c"}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x3f}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000001e80)={0x180, 0x0, 0x905, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff439}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100400}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x4a0, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf04}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 959.776480] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 959.842408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 959.859073] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 959.931930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 959.948833] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x2) fchdir(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {'\x00', 0x63}}, 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) fadvise64(r1, 0x4000, 0x0, 0x4) 17:15:22 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x28, 0x8000) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00df05e5ff", @ANYRESOCT, @ANYBLOB="0f00030000000b00e0ff0a000600050006800000"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x54, r2, 0x300, 0x70bd2a, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x54}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'fd/3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x4000080) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r4, 0x0) 17:15:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x2c}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xf7f0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 960.088454] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @generic={0xff, 0x6, 0x7, 0x0, 0x646b841f}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @ldst={0x2, 0x3, 0x1, 0x3, 0x1, 0xc, 0x8}, @generic={0x8c, 0x2, 0x7, 0x1, 0x1}, @map={0x18, 0x3, 0x1, 0x0, r2}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}}, 0x48) 17:15:22 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{0x0, 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="fa00023a000200020000000000000000000000000800036800000000"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x4000000000000001) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x2a}) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000040)={0xd, 0x18, &(0x7f0000000100)="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", {0x1, 0xcf, 0xb5315258, 0x5, 0x0, 0xff, 0x8, 0x20cb}}) 17:15:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000180)={0xf, 0x7, 0x2, {{0x2, '/%'}, 0xbd70}}, 0xf) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:23 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x101240, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000240)=0xa1, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000000)="c23fc5fe77edb1f425e18692b8d643a882197bf1f74b6aa81d4ff57d8be10fc26ba8e5b3df5195b5217729c171ed9d2f25536b3e2b9451879297478719db56e3b00381bb", 0x44) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9a0000, 0x2, 0x5f29, r2, 0x0, &(0x7f0000000100)={0x9909d8, 0x6, [], @p_u16=&(0x7f0000000080)=0x7}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r4, 0x0) [ 960.224556] attempt to access beyond end of device [ 960.230354] loop5: rw=1, want=1389, limit=63 17:15:23 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000000a01160036c3000000000107000000dc705af5e28ca7699a3571f81559e0cb378acb5292dc5cf1d79b5c527212824679414a55a6c561955d8c66f01e181371c85a7c942e8d54863d60523423d5d1c5eeae788a7990dc70bc3069"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 17:15:23 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{0x0, 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000380)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17, 0xffffffffffffffff}], 0x104e400, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x82307201, &(0x7f0000000480)) [ 960.333091] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 960.480325] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 960.972660] attempt to access beyond end of device [ 960.977873] loop5: rw=2049, want=78, limit=63 [ 960.982370] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 960.991565] attempt to access beyond end of device [ 960.997171] loop5: rw=2049, want=79, limit=63 [ 961.001664] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 961.010561] attempt to access beyond end of device [ 961.016033] loop5: rw=2049, want=80, limit=63 [ 961.020547] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 961.029201] attempt to access beyond end of device [ 961.034699] loop5: rw=2049, want=81, limit=63 [ 961.039197] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 961.048094] attempt to access beyond end of device [ 961.053030] loop5: rw=2049, want=114, limit=63 [ 961.058467] Buffer I/O error on dev loop5, logical block 113, lost async page write [ 961.067008] attempt to access beyond end of device [ 961.071940] loop5: rw=2049, want=115, limit=63 [ 961.077296] Buffer I/O error on dev loop5, logical block 114, lost async page write [ 961.085829] attempt to access beyond end of device [ 961.090764] loop5: rw=2049, want=116, limit=63 [ 961.096322] Buffer I/O error on dev loop5, logical block 115, lost async page write [ 961.104963] attempt to access beyond end of device [ 961.109892] loop5: rw=2049, want=117, limit=63 [ 961.116610] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 961.125188] attempt to access beyond end of device [ 961.130134] loop5: rw=2049, want=130, limit=63 [ 961.135451] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 961.143291] attempt to access beyond end of device [ 961.149083] loop5: rw=2049, want=131, limit=63 [ 961.153664] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 961.162399] attempt to access beyond end of device [ 961.167963] loop5: rw=2049, want=132, limit=63 [ 961.172568] attempt to access beyond end of device [ 961.178246] loop5: rw=2049, want=133, limit=63 [ 961.182906] attempt to access beyond end of device [ 961.188802] loop5: rw=2049, want=157, limit=63 [ 961.197277] attempt to access beyond end of device [ 961.202243] loop5: rw=2049, want=5485, limit=63 [ 961.210754] attempt to access beyond end of device [ 961.216272] loop5: rw=2049, want=9581, limit=63 [ 961.223950] attempt to access beyond end of device [ 961.230016] loop5: rw=2049, want=13677, limit=63 [ 961.238300] attempt to access beyond end of device [ 961.243242] loop5: rw=2049, want=17773, limit=63 [ 961.252202] attempt to access beyond end of device [ 961.258545] loop5: rw=2049, want=21869, limit=63 [ 961.268527] attempt to access beyond end of device 17:15:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x2) fchdir(r0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000001440)={0x8, {'\x00', 0x63}}, 0xfffffc41) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x6) fadvise64(r1, 0x4000, 0x0, 0x4) 17:15:24 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) accept$alg(r0, 0x0, 0x0) 17:15:24 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x2005, 0x0, 0x2}, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000100)={0x1d0, 0xb, &(0x7f0000000180)="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"}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$trusted_overlay_origin(r3, &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000580)) 17:15:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{0x0, 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x5, 0x0, 0x10000, 0x1, [], [], [], 0x0, 0xfffffff8, 0x8, 0x3, "0561b26ce6a7784a1e0e1677627ed2fc"}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffc1a) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e21, @empty}}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'bridge_slave_1\x00'}) 17:15:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/stat\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x88}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x2}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x3496}, {0xffffffffffffffff, 0x24}, {}, {r2, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 961.273468] loop5: rw=2049, want=25965, limit=63 [ 961.281635] attempt to access beyond end of device [ 961.287227] loop5: rw=2049, want=29397, limit=63 17:15:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0), 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b9901273fa3000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac006d5342a7a9f956ae46c361613fe592cd7209252243ae50f1b08a2168979372ad59a197fdcbffcb58e4429c90ea4380c24f159afc9399852aae3b7dfcc03e8afaae2f3459f1b576852be3131d0db6dc3be4713bfc2286e4cd83560b5b4d63893f1c61448208ee8596ffc0f967cc305077b3faeffc0b566402f193f231826303937bd6a4192730bec909ef92", @ANYRES32=r5, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086604, 0x40000000b07101) r9 = openat$cgroup_ro(r8, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r7, r9, 0x4, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', r5}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 961.326191] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:24 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2102, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f00000019c0)={0x8, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1c8aded000005200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c00", 0xfffffffffffffeb7}}, 0x1006) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x801) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r8 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendfile(r5, r8, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100)=0xffc, 0x8080fffffffe) 17:15:24 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0xc000, 0x9, 0x3, 0xe39, 0xfff}, &(0x7f0000000100)=0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r5, 0x0) [ 961.439378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.476722] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:24 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0), 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 961.486841] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.526231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 961.555468] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 961.615830] audit: type=1804 audit(1591809324.329:60): pid=26316 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir607539062/syzkaller.4IZPFH/2114/bus" dev="sda1" ino=17553 res=1 [ 961.700198] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 962.338240] audit: type=1804 audit(1591809325.049:61): pid=26330 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir607539062/syzkaller.4IZPFH/2114/bus" dev="sda1" ino=17553 res=1 [ 962.374427] audit: type=1804 audit(1591809325.049:62): pid=26312 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir607539062/syzkaller.4IZPFH/2114/bus" dev="sda1" ino=17553 res=1 [ 962.431876] attempt to access beyond end of device [ 962.439472] loop5: rw=1, want=2281, limit=63 [ 962.967152] attempt to access beyond end of device [ 962.972523] loop5: rw=2049, want=78, limit=63 [ 962.977980] attempt to access beyond end of device [ 962.983001] loop5: rw=2049, want=79, limit=63 [ 962.988711] attempt to access beyond end of device [ 962.993662] loop5: rw=2049, want=80, limit=63 [ 962.999041] attempt to access beyond end of device [ 963.004585] loop5: rw=2049, want=81, limit=63 [ 963.009154] attempt to access beyond end of device [ 963.014459] loop5: rw=2049, want=130, limit=63 [ 963.019202] attempt to access beyond end of device [ 963.025349] loop5: rw=2049, want=131, limit=63 [ 963.030019] attempt to access beyond end of device [ 963.035513] loop5: rw=2049, want=132, limit=63 [ 963.040207] attempt to access beyond end of device [ 963.045724] loop5: rw=2049, want=133, limit=63 [ 963.050448] attempt to access beyond end of device [ 963.055596] loop5: rw=2049, want=142, limit=63 [ 963.060232] attempt to access beyond end of device [ 963.065259] loop5: rw=2049, want=143, limit=63 [ 963.070675] attempt to access beyond end of device [ 963.075881] loop5: rw=2049, want=144, limit=63 [ 963.080889] attempt to access beyond end of device [ 963.086024] loop5: rw=2049, want=145, limit=63 [ 963.090715] attempt to access beyond end of device [ 963.095812] loop5: rw=2049, want=161, limit=63 [ 963.103544] attempt to access beyond end of device [ 963.108603] loop5: rw=2049, want=6377, limit=63 [ 963.118815] attempt to access beyond end of device [ 963.123786] loop5: rw=2049, want=10473, limit=63 [ 963.131955] attempt to access beyond end of device [ 963.137115] loop5: rw=2049, want=14569, limit=63 [ 963.145243] attempt to access beyond end of device [ 963.150278] loop5: rw=2049, want=18665, limit=63 [ 963.158499] attempt to access beyond end of device [ 963.163504] loop5: rw=2049, want=22761, limit=63 17:15:25 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x4, 0x3, 0x0, 0x6}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f00000000c0)={0x401, 0x8, 0x4e510a41, 0x4}) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='.\x00', 0xfe) keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={0x0, 0x40, 0x1000}, &(0x7f0000000340)=ANY=[@ANYBLOB="656e633d70af5a733120686173a9a7bc1a5b718d962d636500000000000000000000000000000000000000000000000000000000000000000000000000feff00"/79], &(0x7f00000003c0)="3fb923947a6ddddaf7303e304312275dfa5c0d1b35e4e4c973931fd87b6f18ec534c2a6b8014ee040c6aa8e19b9949194f11e8b129c06190c6b64b3c83f01e79", &(0x7f0000000440)="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") r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="b3db3ff52c5ba309ee7f8ea5c6c56f24afba5446a61cae4d57091b46"], 0x1) sendfile(r5, r5, &(0x7f0000000200), 0xa198) socket$rxrpc(0x21, 0x2, 0xa) 17:15:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/stat\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x88}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000280)={0x0, 0x12, 0x2}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x3496}, {0xffffffffffffffff, 0x24}, {}, {r2, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:25 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x240000, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9ee876b058d7e522f7ba16314642dbf99a000000000000000000000800034000000000fa14ec0ed994da0561a98a7d46594ca50f627009fdd3fb9346ab61e16830eb4c748a2c3979e73d4d1d62b2d4d68f30c40bdfc5"], 0x1c}}, 0x0) 17:15:25 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r0) r1 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r2) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r3) r4 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x1, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000340)=0x401, 0x4) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, 0x0) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000200)='.dead\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r5) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)='\'\'.\x00', &(0x7f0000000100)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup3(r6, r7, 0x0) 17:15:25 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0), 0x0, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280)="58eb1e6f17391d8d32f3265277b33590f91522d2964e4343ffcaaedac4471996ef4a2668ec0baa92329bcc0258f13f5647a9dd5785d878a9a1531a9271a04500ede54df6050bfabd2d9c9fa9e2e9bc85f839067108f1c82792eee2d149372c8fe093c7cae5381edeeb7cc547", &(0x7f0000000380)="51408c2ce941d9afd12f9bdee809407dc41c456670ae38f1936f9f8a81aec9f45b366f98e0b6738ae6229f57ec19086530381bcaf6aeb3c0e2682eb7d4beab5e16ad4e1d6d79ec34bc392f87c7f35ff8d718fabe427fa0bd58a0981db73aee8e66d20972d77545e2968e491d4a6c4b2a52a6e787b3ecd2bba3d1043d6f6431a6344191103de54b296ca16ccb4a63e7871651cb7487586a178d609515c15f5d7fee4b46e3366778d5ae46d600"/181}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x1, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000440)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 963.171637] attempt to access beyond end of device [ 963.176828] loop5: rw=2049, want=26857, limit=63 [ 963.184938] attempt to access beyond end of device [ 963.190014] loop5: rw=2049, want=30953, limit=63 [ 963.197814] attempt to access beyond end of device [ 963.202786] loop5: rw=2049, want=32881, limit=63 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34a", 0x79, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:26 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = dup3(r0, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = accept4(r3, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x0) dup2(r2, r4) 17:15:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r8, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x84) [ 963.271557] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34a", 0x79, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:26 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000000)={0x3, 0x1, 0x7fffffff, 0xf272, 0x3, 0xffff}) [ 963.354149] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 963.382484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34a", 0x79, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 963.431191] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 963.443297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 963.497940] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:26 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040), 0x8) 17:15:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x6e7}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0xb0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x300, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240), 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="7ba0b9cc10866f5efc4a1ed8071c1677301d808a14722eebb48e5fb7320680232e47eae4f7d6f0154ee0658cf7b2b8fa0e5973ebebd5b40edfeae6694b95413726"], 0x30}}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000003}, 0x0, 0x0, 0x0, 0x6, 0x1000008000, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x8eb46, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x88000, 0x0) 17:15:26 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xb4, 0x7, 0x49, "622fbd2c6131adb1dbb1bc545dfe1c9f", "b62be12b1313eeed28e684f8e6a6f9356ae3176d537d91bea5236b2e43b3b3eea073f0de30f575d40fa6255f5c1f90d528550663aa27b2bd87294b8a44a2a8a5cecc6ff35422f209346cf429ebdf4849471c8e4f52659414845efffe7950225b901c639fe4446c20abe74b97f3f278cbcf8f13dfb452bd89ccc1059fbd09f88d660dee9ee5e2ceb4a7012d0641b52a51c523e9276fdc12d36c4fe02d254928"}, 0xb4, 0x3) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x9, "c7983e6f423d6f1b90621006b5b855401c36f2cfc09cc2243919d8cc1088a117", 0x1, 0x80, 0x9, 0x1, 0x10, 0x1, 0x8001, 0xeab}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) eventfd2(0xffffffff, 0x800) 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df", 0xb6, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f00000002c0)={{}, 0x0, 0x6, 0x100}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:26 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000005, 0x12, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000040), 0x8) 17:15:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x40aa}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x3fffffc, 0x1, &(0x7f0000000000)=[{&(0x7f00000001c0)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000040000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a02", 0x7c}], 0x0, 0x0) 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df", 0xb6, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 964.058651] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r2, @in={{0x2, 0x4e22, @local}}}, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000680)="979a4156985220c45875dcfe46562c705eb070d129ade5f9e701423838221b3d3a371056a0430803afa79874c0ad50924336a271c7245b419b388cfa59e084157361f01d9dd2df7eb392fde9c499a5d8a6c51441ef966ca90ded65f94db95b3c1b20b09575e5e51efe62ab907e729e1991d3b69e7fb5ef1a6119cbfbfea55a66f0f89a3b0ff908", 0x87) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a010200000000000000e2ffffffff0700034000000000"], 0x1c}}, 0x0) syz_mount_image$cifs(&(0x7f0000000100)='cifs\x00', &(0x7f0000000140)='./file0\x00', 0x76d93a96, 0x2, &(0x7f0000000180)=[{&(0x7f00000003c0)="3c4f95de0b098a0b05719320defd7e2ce8f56d5f87b66315a5eb27382a554f933a61f46e045b344a6d85fdb6a2c86c14bcf1ce7cda08566d65e0b9a5643aee9266bc7f9cb04b6507d8343a5f512471b74bbb74fde8ed9d2ae6b98deec8396e0b860dfe1909aa74c298f89c8d8c9ac4b9aedc2b5d29d2a051790400392d04903bdb3cb5e1c7e7ad21bddacf78f44f70a292c4e77ec1517384bf6631376f3d88061c11c058b8bd924e72bb3e7582db8bc991faab13bbb03c66f3a0bf907690c5646ad74ae53312958f2238fe20a1838fa8ff55d5ca95c783395495906275b03f81e469d48addc6e7f2e4205cdce6", 0xed, 0x1}, {&(0x7f0000000200)="224b7f592b2c872aea7634d21d3bc93d0249bac48311f73ca06ae98931397eb7aee12439736105e07369f4c6f934e64c531c2adb2039396425d56f3a3e5d16371b18f67ed84dda3a9cfbc5919e5f1f27700c416337", 0x55, 0x5}], 0x8420, &(0x7f00000002c0)='w)^0{.^}&\xc4{(](\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000600), &(0x7f0000000640)=0x4) 17:15:26 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0xffffffff, 0x2, 0x7, 0x5, 0x7f, 0x401}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/video2\x00'}, {0x20, '\\(},'}, {0x20, '@]-#[+\xf5&-^{['}, {0x20, 'fd/3\x00'}, {0x20, '/dev/nvram\x00'}, {}]}, 0x3d) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r3, &(0x7f0000000100)="04183730eb419737432db1a604f4e4dfa5529163393184c648ecbdde8646a121be50db616bc19aa0c2089375574324131cd345eea2a62014aa955d93edf62a064db27e9abe12e64f9e21b69687a5fa2efd25e55ce232bf3f049ebc1f8a94b6510d46b88f52fc218f78b6f65d82987be04b920b8ff5071c1475422b8f8df49fb01eaa4f6e9c6240461e12348619876302ff1fe95cf70051f07f9e127c262e613bee81689567c2b19a43e0017a131cf823137615e45d8a33442313a12e3bbb9138dd8e2c784c2bef9140ee8f3dd66e0f1fa67a09cc1f5934951412ab86dfe34e9d84bfc9b1560835c67d2c7d6eac99", 0xee, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x81, @loopback, 0x3}, 0x1c) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x3}, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000380)='net/vlan/vlan0\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$RNDCLEARPOOL(r7, 0x5206, &(0x7f0000000080)=0x4) dup3(r1, r4, 0x0) 17:15:26 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df", 0xb6, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 964.150799] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:27 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/4\x00') dup3(r1, r3, 0x0) 17:15:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f", 0xd4, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:27 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) r2 = getpid() r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000340)={0x2, {{0xa, 0x4e22, 0x57, @dev={0xfe, 0x80, [], 0x33}, 0x1f}}, 0x0, 0x4, [{{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0x7}}, {{0xa, 0x4e21, 0x0, @empty, 0x8001}}, {{0xa, 0x4e20, 0xffffffff, @loopback}}, {{0xa, 0x4e24, 0x2, @mcast2, 0xffffffe0}}]}, 0x290) sched_setattr(r2, &(0x7f0000000040)={0x6, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_getscheduler(r2) [ 964.324109] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) write$P9_RLERROR(r0, &(0x7f0000000000)={0x10, 0x7, 0x1, {0x7, '{(##]\x14{'}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}}, 0x4000040) [ 964.366950] XFS (loop5): Mounting V4 Filesystem [ 964.388992] attempt to access beyond end of device [ 964.410164] loop5: rw=4096, want=131073, limit=131071 [ 964.422214] XFS (loop5): metadata I/O error: block 0x20000 ("xlog_bread_noalign") error 5 numblks 1 [ 964.429116] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 964.446628] XFS (loop5): empty log check failed [ 964.451647] XFS (loop5): log mount/recovery failed: error -5 [ 964.458858] XFS (loop5): log mount failed 17:15:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f", 0xd4, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:27 executing program 1: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:27 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f", 0xd4, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:27 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x41ad00, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r2, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @local}, 0x9}}, 0xe207, 0x3, 0x66b, 0x8000, 0x5}, &(0x7f0000000200)=0x98) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x900, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 965.035293] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 965.110739] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10", 0xe3, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10", 0xe3, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 965.373160] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 965.458372] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10", 0xe3, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 965.647353] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) ioctl$SNDRV_PCM_IOCTL_DROP(0xffffffffffffffff, 0x4143, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x16000, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000440)=""/99, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x7ff}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000200)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x9}, 0x100, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) keyctl$revoke(0x3, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000180)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f00000002c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r4, &(0x7f0000000100)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1) 17:15:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac", 0xeb, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac", 0xeb, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 965.916698] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) socket(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=ANY=[@ANYBLOB="34bb005d", @ANYRES16=r4, @ANYBLOB="0106feffffffffffffff020000000900010073797a300000000014"], 0x34}}, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000200)=0x8, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/md0\x00') bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="68000000100005070000f9bbc7e4b627ef40354a", @ANYRESOCT=r2, @ANYRESHEX=r5, @ANYBLOB="ab2256ce45b1cface1eaccaaca39cbc86ad4ba5f97c1c592e2b14ed128c4f35b81a6554a58d0b7c5a5adfa46aec28afbcd4ee8b5221ce50377e90ea03783047ee61db361cf2140c74b49495b", @ANYBLOB="b1095fdfe8d99b634415afcd2d83413c5068820300baca9e59150abc591310a60802ec012aae962f6bd0a3"], 0x68}, 0x1, 0x0, 0x0, 0xc004844}, 0x44000) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, @perf_config_ext, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 17:15:28 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac", 0xeb, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 966.110248] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 966.210781] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26f", 0xef, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 966.289070] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26f", 0xef, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 966.354928] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 966.381232] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.5'. 17:15:29 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x3}, {{&(0x7f0000000840)=@hci, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000008c0)=""/145, 0x91}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f00000027c0)=""/154, 0x9a}, {&(0x7f0000000a40)=""/223, 0xdf}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000b40)=""/46, 0x2e}, {&(0x7f0000000580)=""/113, 0x71}, {&(0x7f0000000c00)=""/158, 0x9e}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0xa, &(0x7f0000001d80)=""/87, 0x57}, 0x8}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000001e80)=""/208, 0xd0}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000002040)=""/32, 0x20}, 0x3}, {{&(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002100)=""/74, 0x4a}, {&(0x7f0000002180)=""/224, 0xe0}, {&(0x7f0000002280)=""/123, 0x7b}, {&(0x7f0000002300)=""/245, 0xf5}, {&(0x7f0000002400)=""/194, 0xc2}, {&(0x7f0000002500)=""/247, 0xf7}], 0x6, &(0x7f0000002680)=""/164, 0xa4}, 0x4}, {{&(0x7f0000002740), 0x80, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)=""/249, 0xf9}, 0x404}, {{&(0x7f0000002c80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003f80), 0x0, &(0x7f0000004000)=""/98, 0x62}, 0xed}, {{&(0x7f0000004080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004100)=""/6, 0x6}, {&(0x7f0000004140)=""/243, 0xf3}, {&(0x7f0000004240)=""/53, 0x35}, {&(0x7f0000004280)=""/8, 0x8}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/1, 0x1}, {0x0}], 0x7, &(0x7f0000000640)=""/227, 0xe3}, 0x10001}, {{&(0x7f00000045c0)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/121, 0x79}], 0x1, &(0x7f0000004780)=""/243, 0xf3}, 0x1}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x152) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0001000f06030300ba2925211670000000000000000000000605000100004c5239ddebd9f4af2e943a3005e5fda4ac3ca9dc040100"], 0x2c}, 0x1, 0x0, 0x0, 0x20044891}, 0x20004084) 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26f", 0xef, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 966.474964] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f0000000280)={'L-', 0x8}, 0x16, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x3e, 0x0, @thr={&(0x7f00000002c0)="789dbbbda899e03277a7eba5970426c2816e3d366c18688893a7c665bc5ec75acfae3b302a683d1d4fc6fa28", &(0x7f0000000380)="fb8662341532cea28226d51fe2a054345fb5eb1153cc9c78cd6cbe2ea5a459534ad9c1467802774e97ec962c2dfdad6750d462547565e5866c34c331cb6785124071a8b9aa76bd6716dba62cf83ad9fa70265c68c334d967f460a6378d0d71e4895fa6da22ec4273d1cca53ac1c87f6c0d9070bee193167890427e9bcdec34c809834cf1cccb6ea5c410c4f5a955842acd8a65b9623b51d284f635823cd448f143988dabce6e15eb519c68ac94830eeb6c91b997e8eb0b0bb03a2e5f3274d6564ae25b112c24e73c94a16b56584287dd0f8f7bd52820d9393cecc40a83314f85594c6520e4725ad2f3a9c571ae38"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49", 0xf1, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 966.637475] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:29 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xf554}, 0x1800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair(0x29, 0x0, 0x7, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000013c0)={0x4, 0x0, 0x0, 0x0, 0x100}, 0x14) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1a1100, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x22000000) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x4040084) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x800) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) [ 966.800355] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49", 0xf1, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xb0103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x3}, 0x0, 0x4001, 0xfffffffc, 0x0, 0xfffffffffffffffb, 0xffffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) getpid() timer_create(0x3, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340), 0x8) [ 967.028406] audit: type=1400 audit(1591809329.729:63): avc: denied { name_connect } for pid=26600 comm="syz-executor.5" dest=20000 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 967.057752] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:29 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xf554}, 0x1800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair(0x29, 0x0, 0x7, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000013c0)={0x4, 0x0, 0x0, 0x0, 0x100}, 0x14) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1a1100, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x22000000) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x4040084) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x800) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 17:15:29 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49", 0xf1, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 967.260284] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa58b487790f6a416, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x18c04, 0x4, 0xfffffffe, 0x7, 0x1f, 0xfffffffd}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000180)=0x3, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:30 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0700000010000506ffd4619b99bc273f09000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r6, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@newtfilter={0x1334, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1304, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_ACT={0x12d8, 0x6, [@m_xt={0x84, 0x19, 0x0, 0x0, {{0x7, 0x1, 'xt\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x12, 0x6, "98765beb359460d008e1efee063a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ipt={0x10e4, 0x19, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0x1074, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x102a, 0x6, {0xf7f, 'filter\x00', 0x2, 0xf3, "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"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000001}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x4c, 0x6, "b27a2f94284dc6dfa08347d2b2e5909e52f2d8c9d36974f5a8835fe5acca9459d0eae2f871617d47797d0f1973d132d3b9b9510ca59c16ff90b0fc326c974c57a17e5fc75f8fc6b3"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x16c, 0x13, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0xac, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x3, 0x10000000, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1b66, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x39bf, 0x7, 0x5, 0x7, 0x8}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0xa6, 0x10000000, 0x1, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x12da000, 0x3, 0x5, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa1dae938, 0x3ff, 0x3, 0x10001, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x101, 0x8001, 0x6, 0x2, 0x400}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x25fd, 0x6}}]}, {0x95, 0x6, "4b4491139f8a129e5cd44b2b2dea247aa0bd3cf0e4a0c1a5805735a4fc36a10102c9f608ff83361147ed2576e0d68659479581d0b03096d7cf1b9506b73c2041a50c3a86052482cb341a691cde7a0bd4c47ce59c54772a779e91a9f167bbcc9e2f12345b20008636de45411c1f5150840df9c03d187d1247a5fa5704b142169c26dd9b1aabee4fdc58c439232222717bc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1334}}, 0x0) recvfrom$packet(r2, &(0x7f0000000200)=""/239, 0xef, 0x40000040, &(0x7f0000000000)={0x11, 0x1a, r6, 0x1, 0x1, 0x6, @random="120f45b63c9a"}, 0x14) r7 = syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x102, "9ce3989cc7455521a329de76e8ed408f6ac25978b40106e9ab4c52886ebb9c7e", 0x10000000000000, 0x4, 0x768, 0x8, 0x10001, 0x100, 0x20, 0x5, [0xffffffff, 0x6, 0x0, 0x2]}) 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 967.456505] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 967.580673] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:30 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0x5d, 0x3, 0x1, 0x7fffffff, 0xfff, 0x4, 0x8, 0x8}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x0, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 967.712119] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x0, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 967.836490] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 967.942400] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:30 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe17, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0xf554}, 0x1800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) socketpair(0x29, 0x0, 0x7, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000013c0)={0x4, 0x0, 0x0, 0x0, 0x100}, 0x14) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1a1100, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x22000000) move_pages(0x0, 0x8, &(0x7f0000000040)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f0000000100), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x4040084) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r1, 0x0, 0x0, 0x800) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) 17:15:30 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) 17:15:30 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x0, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:30 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup2(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, 0x0) [ 968.234085] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e2, 0x14042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xe, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)={0x40, 0x9}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:31 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_DEV_CREATE(r0, 0x5501) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') dup3(r1, r2, 0x0) [ 968.427772] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, 0x0) 17:15:31 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x3, "edf83e69acab8ce297d923bf1eb9c2bc1fb0d0f71b4c365ec9cf68e456ee7b2c", 0x0, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') dup3(r0, r2, 0x0) 17:15:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 968.724732] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, 0x0) 17:15:31 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000180)=r3) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x2d20000, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000540)={0xffffffffffffffff, 0x6811, 0x7, "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"}) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) prctl$PR_SET_FP_MODE(0x2d, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4080) 17:15:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000180)={0x2d, 0x6, 0x0, {0x3, 0x5, 0x4, 0x0, 'fou\x00'}}, 0x2d) 17:15:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:31 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 969.151931] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:31 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) dup2(r5, r1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r6, r7, 0x0) 17:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:32 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x38, 0x3, 0x10, 0x2, 0x5, 0x0, 0x405, 0x8fa5, 0x5}, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='attr\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f0000000200)=""/131, 0x83}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) dup3(r0, r3, 0x0) 17:15:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 969.325461] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:32 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r3, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r7, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x6c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r8, 0x0) 17:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 969.457427] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 969.518223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 969.579649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:15:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:32 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000)=0x800) 17:15:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 970.043740] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:32 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}]}) 17:15:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000480)=""/225) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) writev(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xd5142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x1}, 0x18404, 0x10001, 0x0, 0x4, 0xfffffffffffffff7}, 0x0, 0x6, 0xffffffffffffffff, 0xe) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0xfffffffffffffffc]}, 0x8) 17:15:33 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = getpid() ioctl$FIONCLEX(r0, 0x5450) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r3, 0x0) 17:15:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}]}) [ 970.224334] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}]}) [ 970.391631] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:33 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') dup3(r1, r2, 0x0) 17:15:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 970.524176] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 970.600835] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:33 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000140)='map_files\x00') ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x1, @broadcast, 'team0\x00'}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0xfc, "05793aee6def4da0532b3186d1b653f9763a6567e082663a4c34982091acf986fd4ee1a7a62647f8dca55d60622f6f2b19afbbcf256ca3d5d67a16efffe6ced0de412f417f2b69298820fb3f179ffd93b98ad3247991e658d29f2dc502ae2d26341617026d84bcb8dcb6cf7375148752c584046888ce14b25060f91d8b1a8c34f29a4d1490716a3b7348fcdfedc18b1805c211c189979666905b2e50fbdf9a2539a7b025091d740d8b17939547840dc22ecd26257ecae4a49403aadbab3fa9df1915d290ad742d899533bf5b3734e38370e6084ec8929fd39b5e95b5d1e50e4166d6610d10ed906a60d12fe16f2d5ba2d4ecf8e87f66295f0abb5d3c"}, &(0x7f0000000180)=0x104) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 971.047726] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:33 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000014}) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000)=0x9, 0x4) dup3(r1, r1, 0x0) 17:15:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:33 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:33 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='statm\x00') r2 = dup3(r0, r1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x2, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x10042) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) socket$pppoe(0x18, 0x1, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f0000000040)=0x2) 17:15:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 971.263303] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:34 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) [ 971.367572] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 971.513344] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:34 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x10, 0x70bd29}, 0x14}}, 0x240040d4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r9, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x13c, r3, 0x211, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) dup3(r0, r1, 0x0) 17:15:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000180)={0x8, 0xb6}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 971.951538] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 972.037425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:15:34 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 972.125888] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 972.153180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 17:15:34 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100000000, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) dup(r3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyprintk\x00', 0x200100, 0x0) dup2(r0, r4) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/current\x00') r7 = dup3(r5, r6, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r7, 0x4) 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 972.234689] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 972.361925] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 972.510520] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING [ 972.649135] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x9410a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000400)="03adcf31a679fca4372c478031c0421d41b6c368210a2100f3b5ba21aa16328f9a2e9c643703ad42b0b840abc9a4f306bea7b95954f46a11b22f0a7d2e66162cc730d2f4502bd39d4d9018a03101892a0473cb0aab500ad8e4b527b7f7b23fddb1d96a22f2a0cba20395c49d6186f57372b3f8f75321beaf4b7758b0a8587424f2cbc9a1606f6594fa09a60cd7673e477d1d26c5f506a9224c03e5009e72904db1c8e9d3204cb3dd283443cb36d95518c7fa37f42dbf88cdd3efdc2d7ea7b9ae581bd4c5db1b6da89a9361743053ef154f8b85baccb6726f6b669a391ba93ee12f60cc740a76fc447f6ccd", &(0x7f00000001c0)="c1c91895068c9e20f0e329d8c09427e7ca08a7817463fb7afa9940494a53f7491d0bc304"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x1, &(0x7f0000000380)={0x0, 0x0}) ppoll(&(0x7f00000002c0)=[{r3, 0x100}, {0xffffffffffffffff, 0x200}], 0x2, &(0x7f0000000300)={0x0, r4+10000000}, &(0x7f0000000340)={[0x1000000]}, 0x8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x50000, 0x0) 17:15:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x2}, 0x18404, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) [ 972.909711] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) [ 973.018267] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 973.150349] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:35 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61, 0x0, 0x43}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x3e2, &(0x7f00001a7f05)=""/251}, 0x34) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000100)='fd/3\x00', r2}, 0x30) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/ip6_tables_matches\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r4, r5, 0x0) 17:15:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000100), 0x4) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) [ 973.228306] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 973.338838] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:36 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) fcntl$setflags(r2, 0x2, 0x1) read$FUSE(r0, &(0x7f00000015c0), 0x1000) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000001500)='TIPCv2\x00') r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000001580)='net/l2cap\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) preadv(r5, &(0x7f0000001440)=[{&(0x7f0000000000)=""/21, 0x15}, {&(0x7f0000000100)=""/159, 0x9f}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f00000001c0)=""/248, 0xf8}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f0000001340)=""/125, 0x7d}, {&(0x7f00000013c0)=""/78, 0x4e}], 0x9, 0xe92) dup3(r1, r3, 0x0) 17:15:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x6) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 973.476410] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_names\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x40, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x18004, 0x100000000, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x7, &(0x7f0000000240)={0x0, 0x0}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000380)) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:36 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000)=0x40, 0x4) 17:15:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) [ 973.952657] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:36 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0x91e) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='fd/3\x00') ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000000)=0x7) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r6, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) setuid(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:36 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 974.079638] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x810) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x18604, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x32, 0x0, @thr={&(0x7f0000000380)="cb0ca006708d54a728570cbf541c3d6f029db21523c71d9e03d606d9dc01562c41a831e9605b0f32937893e5f8bd264ec58d97092fb2fb724e0131fd9f3c7098186de30dd4c3b8eab20944d6d18d49ff58a11a6718c7e59ec0c666ec1c013558e676f906ba731a4501face417a926b372283883e1c7ba01336ad44098482c9847371e7974532fcb1e30373150afb6b2f428d96ee92bda9f63a3a3ba3264bf440846f003008819a5b2a3a8e25a4f6fbdfefa54db1973d36", &(0x7f0000000440)="5ae48725a888575add52d8db762ac4a1353dbebc789b4616f68624a805da108ab96910323835f20357b8fad0e433abb712d5e0f88bdd50380c7487cbd72ac57b89219b6a38d50b2fd9880838df3aed7365fbb3d7155f74aa4e137f92b44f50b381846d11eca6b35e7e7eec1427bc6fca3432f3ab436c7386c03f555c9be857e101a98726"}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = getpid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @tid=r3}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x22}], 0x5, &(0x7f0000000300), &(0x7f0000000340), 0x8) 17:15:36 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0xd34) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000040)={{r4, r5+10000000}, {0x77359400}}, &(0x7f0000000080)) dup3(r1, r2, 0x0) 17:15:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r5, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x200}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x9}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40802}, 0x20000884) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@obj_type={'obj_type'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 974.226219] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) [ 974.347960] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) [ 974.543868] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:37 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) [ 974.680887] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000280), 0x3}, 0x18c00, 0x4, 0x0, 0x7, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@fsuuid={'fsuuid'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:37 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, r4, 0xab9535e9a6578fc1, 0x0, 0x0, {0x6b}}, 0x14}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000004130a01020000000000000000000000000800fd3f000000a2"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) sync_file_range(r2, 0x40000000400000, 0x9, 0x5) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @in={0x2, 0x4e20, @remote}}}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000002c0)=0x28) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, r4, 0x10, 0x0, @in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, [], 0x1}, 0x10001}}}, 0xa0) io_setup(0x0, &(0x7f0000000300)=0x0) io_getevents(r6, 0x2, 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000440)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:37 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) [ 974.937679] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x102, 0x4, {0x9, 0xb8d2, 0x6, 0x1ff}}) dup3(r0, r1, 0x0) [ 975.037043] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:37 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0x4) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:38 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0x9, 0x9}}, 0xa) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x7fff, 0xffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) [ 975.217695] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:38 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000000)={0xd000, 0x4000, 0x64e9b312, 0x3ff, 0x1000}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0xfb, 0x4, [], &(0x7f0000000100)=0x2}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x3, 0xc8, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9a0907, 0x7e38, [], @ptr=0xccd0}}) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r1, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x9458b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x10000000000008}, 0x18404, 0x4, 0x0, 0x7, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r2+10000000}, &(0x7f0000000340), 0x8) 17:15:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 17:15:38 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x9, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@private1, @ipv4={[], [], @multicast1}, [0x0, 0x0, 0xffffff00], [], 'wg0\x00', 'nr0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) syz_mount_image$ntfs(&(0x7f0000000140)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x4, &(0x7f00000006c0)=[{&(0x7f00000003c0)="c47d48466d1440524eb9f636275b10283a460d268bdf23754f9042c1625e82fa556bb7106ea094e2ca185a9ee17810e325a0d1256bda5dd8baca9956fe9c37a701f94133c5d4e0e40b12561a46f992a157b975beae7feb1f504e64ef9b378a2a5c6eb1032286e36b02f5a6218189d8fe57fd812deeb2fef34ae714598d46c17df46ccc872e4fe4a537963c0830fe585e7f2aefb144fddde63044ae66c7a29ad25faa7d2f0f9286021b493b5eb39befa755d17c93e9df77e8679e3b2b20bf2a03bc1489f0fa5dde435ff2f06cec24bf21b2a6d99f3a424a042e03b8d1cc45a9187d4e10efaf4bf0348510ac88b5d26fef49a4", 0xf2, 0xe1}, {&(0x7f0000000600)="954e007963f5a43e3d734138910838ba322355cb3739d6744491bcc882c085add13fe6e825aadc62774834", 0x2b, 0x1}, {&(0x7f0000000640)="69751e0237d54a300661eb8f1d0177", 0xf, 0x33bc}, {&(0x7f0000000680)="aac717108c3492c26f01f0bb0f651904322ec4cb88fd98c975668424f6ff6e926470a1fad5db4a37d3ef0e6cceebd1177445a1e3b087992645f63967c582e150", 0x40, 0x9}], 0x201a, &(0x7f0000001b80)={[{@gid={'gid'}}], [{@obj_type={'obj_type'}}, {@uid_eq={'uid'}}, {@uid_gt={'uid>'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid'}}, {@smackfshat={'smackfshat'}}, {@uid_lt={'uid<'}}, {@audit='audit'}, {@smackfsroot={'smackfsroot', 0x3d, 'fd/3\x00'}}]}) 17:15:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000400130a010200000000000000000000000008003f0600000000"], 0x1c}}, 0x0) 17:15:38 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x77) dup3(r1, r2, 0x0) 17:15:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) [ 975.753821] x_tables: ip6_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 17:15:38 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/dev_snmp6\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='sched\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r4, 0x80184153, &(0x7f00000002c0)={0x0, &(0x7f0000000940)=[&(0x7f0000000140)="65f6ec4392cbf6ea584fda71d2696782a3858271aee889cd6e608ac9e1dcefa674a8cee975846718fc54a440544e9afc42df2267abff268656e7cd9ff1823db10e59219d51f4a903dd922e351d1d04133e13e6e00693862bf24bbddccb5965e346fb", &(0x7f00000001c0)="877aad9b980609058d08f085703d8ddbaedb4f2bc77b4aaf3c3be142a6595ee301125e5f6721decf8a30d790b43b71226758ed824f8565f6a73f367878eeeeb7380ad37b43f81f9ec01d63eb3c68d56d0c24b79f28082d1ca15071efd3d73b087b", &(0x7f0000000340)="6b86fad9633fe20d491c7620250327d3552ba87a0ea444b32e2931cb7d88960666668ce47c3e25a6c952b76857f59171553c8c117706a722cf30cb9145b9bcd3f5827c665fdf3ef82d18eec2c3cbbb5c7325c42dafcf18b8f3a8f3fbf1da8cc6e3b417caea1c71ca76536f544d379fb72829a6279e801b772fad31ecaeb25090269755ed5848780cd54916175984ec7036d1bd7ef267056b54e7e42a34e03d84ac206a214dd0945b2b1a5aaeeb407a01daf514bb63d8f96c9c934008bad2fbef3a431793045d6c949f13c083c1d2f904dec5e969ed79a987179290bd", &(0x7f0000000440)="7324274fa8423a39e0d435c377081ae7d6ad1c4467e07ac7ac6bf2d7704259cfdc1a2ca4f24d38547aa32dbe30ed3dd07c9b0b4141a62a638ca6143ce94b6887704f6de0a4d013e86fe094371920884bdf783cd9172698816cf194ae640f6da55b55c930fe4e44ef34dd605d9cabd08f537153e17edc51be0c2651acab5d73c162994ff56c350ff0262020bd0c77ac2ad3ea6a74e79056b58867f290beb4c8f60915fe9499c8950c61c601e0368ade16830bfb7bda68bbae6ef819dce10e44dc3c4aa7a326e6740a8aeec696cdb3014f9e0e76014611f3443d291490df16033dcfa61b", &(0x7f0000000240)="5f1bd88f033e402f4128e2bdd93499d0b56bc6b53c65b42cc4af8c3213e2066e01b8bd6df8992344bde02f3100f2a90e268135ad84964bf2b6b680dcb722d26fd1ff38eaf8cd864b9284965864dce12d2e7bfad40111", &(0x7f0000000540)="9d379d79dbcb717eba18c81737a44238ead7f5b46387e4078b605dce4b6f24f3038fd897da99348a83bdd4c701ba88c60dcd6482e5d24fc033c20c1969d8ba57adfbda6b2c44bebf5f0829", &(0x7f00000005c0)="af8447178d42c904107ac21e4f51ec3a950eb2903a764ef026b6fc7eda1e5be8b4463a4c45a10f0ca070b7dc92919225f047b20c058861dab9a6b4db87e7dc9fadcaa050610ed452f5fe2dfe32e2c188a73fc832522640ec6382bebb919868dd16b5ba66f94c43e9e371d74a86c0f0ecf27fd14e7912c78de249c2410fcb54bf381935e65def92d46d736d0ca55222ce0481418d4f9b224079a281ad4f0832828b6db79176f07285ab683e9ccb2b0188584682bfd970f8e03f9ac21a0e9485d2933c4f7bfc87e2c9441a05d1aa58d5c99326", &(0x7f00000006c0)="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", &(0x7f00000007c0)="8d50cafdd872c9447c19867455dd0ff1ed6bcc445395e42c6c390a408ca668cdf06e8d133320e77e3282d798eefb8cd6e9a261869e0ed8018a8da2b3c272c2e2e61d50293a141d540ac9f6240dea4be8f5cba1a4584771fff68f00c770c6c1a8adc1ff0d64f6b514440c3162270612fb48ef1d8352b0aea7c7e895a37b748f8c2bc5fe8b80dc77a00641be5a86bb7b685b8b852405739f0b2a8348e6634e29ebb734883f96e5450a0a0b64e0590471749a877b36cc652fde8ce8c27e160865abcfa6d6fc6c40a1378b5a2da365b68e63530c7677762f3e94c4c71598867276", &(0x7f00000008c0)="b6f27971432abdfdfe413036aaf0aa363abc11c88e90f75eaf9acfa352609aec1258ec7043ab3382cccc29267221b4fbc338097dc4eb12819bc801a5783231670e4ef1a3"]}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r5, 0x0) 17:15:38 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 17:15:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$IPSET_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8855}, 0x24000000) 17:15:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x4, 0x0, &(0x7f0000000140)) 17:15:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) 17:15:39 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = gettid() syz_open_procfs(r0, &(0x7f0000000100)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f00000013c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"/4851], 0x12b4}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r2, r3, 0x0) 17:15:39 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000800034000008000ff3b4d16971ae46f2c5f0c2a000000000000"], 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0x10000, 0x4) 17:15:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x4, 0x0, &(0x7f0000000140)) 17:15:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) 17:15:39 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="064b620a7543f91ee324463a80a6f7a728e903598983a42cfa0d7dd999c3f9c51d357c16b9866cf927b282341d427d0be69362c5920e72a422cf64487ac30f0b4cc75a4f57c027ab1ddca59d027a2fafc68f173256f4703e9ceb74cda5f5e8d0836bbc62accbc77b87319a68ce8e95cd7d423e328fdd24afb079873569507a655fea835c84d8f00471c7d09b0d6d9ac6bbd3fe8af74af85244845990ccb229187339646ee606798d0835"], 0x10}}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x9, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000680)) r4 = inotify_init1(0x0) close(r4) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x840) 17:15:39 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup2(r1, r0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x10000, 0x0) dup3(r4, r2, 0x80000) 17:15:39 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup3(r0, r1, 0x80000) 17:15:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e24, @broadcast}}, [0x5, 0x82f, 0x3, 0xff, 0x5, 0x1ff, 0x99, 0xe6, 0x400, 0x8000, 0x1, 0x7fffffff, 0x7fffffff, 0x1, 0x10000000000]}, &(0x7f00000005c0)=0x100) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={r3, 0x9, 0x1, 0x0, 0x81, 0x2}, 0x14) 17:15:39 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup2(r1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x840, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x40000000b07101) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x4}, 0x16, 0x3) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000040)={0x5, 0x8, {0x7, 0x7e0, 0xffe0, {}, {0x4, 0x200}, @cond=[{0x642c, 0x4, 0x1, 0x9, 0xffff, 0x7}, {0x0, 0xb65, 0x4, 0xaec9, 0x8166}]}, {0x55, 0x5, 0x4, {0x8493, 0x2}, {0x100, 0x200}, @const={0x200, {0x8000, 0x1, 0x3, 0x7f}}}}) dup3(r2, r3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086604, 0x40000000b07101) write(r6, &(0x7f0000000100)="60bd68fd6b9ef622dde0a47db10ac292f9137ce6be76991973308ba095d544cc32993f322f46393a5ce3f59d91b4c15492c1bc7d4abb5cba6aaba3798b1204758e16e6494565f3e12f27884c8ede", 0x4e) 17:15:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'ipvlan0\x00', {0x7}, 0x1}) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x0) 17:15:39 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) 17:15:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x240000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:39 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(0xffffffffffffffff, r0, 0x80000) 17:15:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000130aa0bb3a2a1a2b353200000080000008000340000000004362ec5ef9cc622e017a491b21530b8cee080667e33332fa45b96a425da7f06ffb5e247dc485c0c6be35ad6846316edcb4db7c734024cfe0caf01a67259cf5e7"], 0x1c}}, 0x0) 17:15:40 executing program 4: sendmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="064b620a7543f91ee324463a80a6f7a728e903598983a42cfa0d7dd999c3f9c51d357c16b9866cf927b282341d427d0be69362c5920e72a422cf64487ac30f0b4cc75a4f57c027ab1ddca59d027a2fafc68f173256f4703e9ceb74cda5f5e8d0836bbc62accbc77b87319a68ce8e95cd7d423e328fdd24afb079873569507a655fea835c84d8f00471c7d09b0d6d9ac6bbd3fe8af74af85244845990ccb229187339646ee606798d0835"], 0x10}}], 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)={0x0, 0x9, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x15) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000680)) r4 = inotify_init1(0x0) close(r4) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x840) 17:15:40 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_trie\x00') r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='sched\x00') dup3(r0, r2, 0x0) 17:15:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x900, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000080)=0x2, 0x8) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="13e600718bc9e80abf2921e8ce4bf2f1260000e422"], 0x14}}, 0x4000100) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000040)) 17:15:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed5619b99bc273f09000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r5, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xf}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x20}}, @TCA_RSVP_DST={0x8, 0x2, @private}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x64}}, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=r5) 17:15:40 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) write$binfmt_elf32(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x91e) 17:15:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) [ 978.098031] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:40 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000040)) getsockname$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) 17:15:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x84}, 0x40084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) [ 978.251521] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:41 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x101, 0x80, 0x4, {0x6, 0x1}, 0x5, 0x1}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$RTC_PIE_ON(r3, 0x7005) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40086604, 0x40000000b07101) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(&(0x7f0000000200)=ANY=[@ANYBLOB='/lmd0\x00'], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='bfs\x00', 0x1000000, &(0x7f00000002c0)='/dev/video2\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x6c0002, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)={0x5, 0x8, 0x4, 0x800, 0xfffffffd, {r5, r6/1000+10000}, {0x2, 0x0, 0x9, 0x9, 0x20, 0x9, "a7c05985"}, 0x1f, 0x3, @planes=&(0x7f0000000100)={0x96, 0x10001, @fd=r7, 0x4802}, 0xba99, 0x0, r8}) 17:15:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) fchdir(0xffffffffffffffff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/101, 0x65}], 0x1, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x8}}, 0x50) 17:15:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x67, 0x19, [], [@hao={0xc9, 0x10, @loopback}, @generic={0x8, 0x67, "0f8502e757aa83b53487617e089166c6fee531d0d9d15a12fae431eb82ebbebaed67745811a6b4f49a1a680e427070c56478ca9fe5881677a7310e155230198d6f457cf1f714fd6ceb43b7f7983af6eb051b4f21eda4f570e81becf32ad53f0ec883b652ad717b"}, @calipso={0x7, 0x48, {0x2, 0x10, 0xa8, 0x0, [0x7fff, 0x1000, 0x400, 0x101, 0x3122, 0x5, 0x8001, 0x2]}}, @pad1]}, 0xd0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000040)={0x0, 0x4, 0x3, [], &(0x7f0000000000)=0x39}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000280)) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000130a010200000000000000000000000008c6ae85260045f2b5b77069a1e8b6fe09953be5664e673074f1112d87b7c176b9cbba964964e8a2c263582ea646898b86f850c2922837d03012498e5675"], 0x1c}}, 0x0) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') dup3(r1, r2, 0x0) 17:15:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:42 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x80) sendmsg$AUDIT_TRIM(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x2, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x404c800) [ 979.460318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x15c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2d42e64e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc8be}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48000}, 0x4044) dup3(r0, r1, 0x0) 17:15:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) write(r0, &(0x7f00000003c0)="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", 0x1000) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r1, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0xae, 0x9, 0x1d, 0x0, 0x10000}) 17:15:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x44200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x70, 0x0, &(0x7f0000000140)=[@exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0xb, 0x3}, @flat=@weak_handle={0x77682a85, 0x1100, 0x1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}, @request_death, @clear_death={0x400c630f, 0x1}], 0xbd, 0x0, &(0x7f00000001c0)="2bfa16300f70b23dadf4789c6ca49dd585dfaaa9e42fd7a25e240ddd5ada4c7d0b3959e06bb697a69f4ca9f1b15cd4076285aa9ba50ee0badd1e740be0ac0c51ed9f1f0ef4fbe2d99ab0600f9bff80292a594d125054fbbf6e9c4e3e46177c1222109522c312550d909ee6f7fe11e4999a6ec6fd65cce379fb4e2d8ae603c88f1d523553230d67e1a8dbc27d4a137b06c240bdb6be930cd7d9366b6d851c0dbfd4c2d70598b4c50ff9b6c29dad366e51ee5805fd639f25b94925d17107"}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r0, r3, 0x0) [ 979.769176] IPVS: Error joining to the multicast group 17:15:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, {0x4, 0xffffffffffffff60}}, 0x28) dup3(r0, r1, 0x0) [ 979.854208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @private=0xa010101}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e21, @loopback}], 0x8c) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1}, 0x1c}}, 0x0) getgid() sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c1}, 0x20018000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xb}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x800) [ 979.937298] IPVS: Error joining to the multicast group 17:15:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) 17:15:42 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x1, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netstat\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086604, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_netdev_private(r6, 0x89fc, &(0x7f0000000140)="8aa09179c30f15fe78f94630e57f9492c10c6db53b3a0c3024ff8f1deb69a312d23d03b81e92379da331b6a1203c7b") getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r7, &(0x7f0000000100)='wchan\x00') dup3(r3, r4, 0x0) 17:15:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x2, 'bridge0\x00', {0xfffffffd}, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000140)='./file0\x00', r3, r4) fstat(r1, &(0x7f0000000000)) 17:15:42 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x37}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4000}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7ff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17:15:43 executing program 4: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0xd8, 0x50000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 17:15:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c620b2c0f42e6b7b673c361d3bfb9a0c600000000000406fe000800"], 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x4060001) 17:15:43 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 17:15:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:15:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:15:43 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x303, &(0x7f0000000440)=[{&(0x7f00000015c0)=""/4096, 0xfffc}], 0x1}}], 0xffffff1f, 0x0, 0x0) 17:15:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:15:43 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x1056c2, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfffffffffffffd62, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x29a}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x200000000004}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbac}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0xc001) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='pagemap\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nvram\x00', 0x12000, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000640)=0x1, 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000680)={0xfffeffff, 0x1, {0xffffffffffffffff, 0x1, 0x2, 0x0, 0x9}, 0x80000001}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) r7 = syz_open_dev$mouse(&(0x7f0000000440)='/dev/input/mouse#\x00', 0x9d4, 0x30500) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f00000004c0)={{0x7, 0x4, 0x8, 0xfffffffa, 'syz0\x00'}, 0x2, 0x10000000, 0x9, r8, 0x3, 0x9, 'syz1\x00', &(0x7f0000000480)=['pagemap\x00', '/dev/infiniband/rdma_cm\x00', ']\x00'], 0x22, [], [0x200, 0xbf8b, 0x7, 0x7e5]}) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000130a01020000000100000000080003400000000000000000"], 0x1c}}, 0x0) 17:15:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 981.132042] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 981.177559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:15:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x3) 17:15:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:15:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000540)=r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0xd000, 0x4, 0xf, 0x0, 0xcb, 0x3, 0xa8, 0x1, 0xa7, 0x0, 0x9, 0x9}, {0x2000, 0x2000, 0xf, 0x40, 0x0, 0x5, 0x76, 0x2, 0x5, 0x6, 0x80, 0x5}, {0x4, 0x2000, 0x4, 0x5, 0x3, 0x9, 0x9, 0x80, 0x3f, 0x9, 0xff, 0x6}, {0xd000, 0xd000, 0x3, 0x40, 0xcf, 0x81, 0x6, 0x1, 0x2, 0x4, 0x80}, {0x1, 0x0, 0x8, 0x20, 0x1, 0x6, 0x9, 0x6, 0x86, 0x0, 0xf9, 0xa9}, {0x5000, 0x1e001, 0x3, 0x40, 0x7, 0x81, 0x1, 0x1, 0x1f, 0x1, 0x3, 0x20}, {0x4000, 0x100000, 0x1d, 0x0, 0x1, 0x1, 0xe2, 0x4, 0x3, 0x9, 0x81, 0x8}, {0x1f003, 0x3000, 0x4, 0x93, 0x0, 0x9, 0xad, 0x81, 0xfb, 0x7, 0x3, 0x2}, {0x2000, 0x6}, {0x1000, 0x4}, 0xa, 0x0, 0x100000, 0x20020, 0x2, 0x1c00, 0x100000, [0x8, 0x3, 0x3, 0x100000001]}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000180)="765c8ec8f336b398536c6a251d1d89b15022118fcbad497964fd9d47f310d7113f04ce6e3ac34e79cf42f098138617b85ad294eea375224f58b48b951252a9da31a8fd4cbf1f597a764e6ecc75872e3102b68321ef1cd5571f5048e167d162528d92a40da27f7e6d6469b4c4ae658b2bef3aa2a9c030a9286f3039eace2edb7bc2958471f09a8dbe39c85ee433542b6a4fc0b14e6453bb2ea9784eeab03ec332dac44b94497e4a22892916", &(0x7f0000000240)=""/147, &(0x7f00000003c0)="adfe6cddebc1057e427796af15049b019a856ea4246b42686e3c91bf675878990f683587ce062eb5516eaff3d97258f17614b3aa9f3a198033c0cf066988319f8fcac85111c74eb16c5d0f83dd3acb42c6eed41c1f6211c2ff7c99314be753f03476ae46eb", &(0x7f0000000440)="aa6c2517ea5b8a05631aadb066d869ee97aa2e8f9e2a0d1e990a416cf273a47a0fa13af8fad7659967ea3ca251b0352ed13a2b7706289fc37d9fee5e7ba3be629adca2632f2ac9ffb7dcd136552c81e4d35b3a8d219148e27debce270d7d8caf3cae6cafab2fad766a07a4694d627064d156d5c6e6258a8e65f5ce629e0199cd190e0eb4b38849a60ea0f2e14b0451239671469cbdeef0209bed1b2bb45ab3f9ecdfd0ecf8e796fdb6ad0300de074689c275aa9679033fdd4aa7ce270bd9a483e13102c3a263", 0x5, r0}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000130a010200000000009400000000a6299b00000000000020000000000000000000"], 0x1c}}, 0x0) 17:15:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:44 executing program 4: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x3) 17:15:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x13, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}]}, 0x1c}}, 0x0) 17:15:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}}, 0x800) 17:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) 17:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:44 executing program 1: syz_emit_ethernet(0x15, &(0x7f0000000080)={@link_local, @dev, @val={@void}, {@llc={0x4, {@llc={0x0, 0x0, '\x00'}}}}}, 0x0) 17:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:44 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = gettid() r2 = memfd_create(&(0x7f00000000c0)='}\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000000)={0x21}, 0x21) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffd}) ptrace(0x10, r1) write$P9_RSTATFS(r3, 0x0, 0x0) 17:15:44 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) r0 = gettid() r1 = memfd_create(&(0x7f00000000c0)='}\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fffffd}) clock_adjtime(0x5, 0x0) ptrace(0x10, r0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) 17:15:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x40000000b07101) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:47 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:47 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) 17:15:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:48 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x43, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0xc}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x1000000000000125, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$cont(0x9, r0, 0x0, 0x0) 17:15:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0xfffffffffffffd9f) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)={0x9, 0x6}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:48 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x40}}, 0x0) 17:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:51 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0xfffffffc]}, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r2 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r3, r3, &(0x7f0000000240), 0x7fff) 17:15:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:51 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setfsgid(0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454da, 0x400014) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) tkill(r1, 0x3) wait4(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 17:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000280)=0x6) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r3, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x520, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f00000002c0)=[{0xffffffffffffffff, 0x40}, {r2, 0x24c4}, {0xffffffffffffffff, 0x24a0}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300), &(0x7f0000000180), 0x8) 17:15:51 executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000024000b0f000000000000000001000000", @ANYRES32=r5, @ANYBLOB="00000000ffff000000000000070001006671000014000200080005000000000008000a"], 0x40}}, 0x0) 17:15:51 executing program 1: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r2, 0x0, 0x116) 17:15:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4342, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/45}, 0x18) 17:15:51 executing program 1: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x116) 17:15:51 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) sendto$inet(r0, 0x0, 0x0, 0x2404073c, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) 17:15:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:51 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) dup(0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0) 17:15:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:51 executing program 1: open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x116) 17:15:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(r0, 0x0, 0x116) 17:15:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:52 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x116) 17:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:52 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x116) 17:15:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 17:15:52 executing program 1: r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x116) 17:15:52 executing program 1: syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:52 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x97, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/126) 17:15:52 executing program 1: syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}}, 0x4000) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) 17:15:52 executing program 1: syz_open_procfs(0x0, &(0x7f0000000280)='net/nf_conntrack\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x116) 17:15:52 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5}]}}]}, 0x48}}, 0x0) 17:15:52 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) 17:15:53 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0xffffffffffffffff, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b98d91c22def1125d7b1e821039a95a", 0xef}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}}, 0x78) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 17:15:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = dup2(r1, r0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0x108, 0x108, 0x210, 0x108, 0x0, 0x318, 0x2e0, 0x2e0, 0x2e0, 0x318, 0x4, 0x0, {[{{@ipv6={@ipv4={[], [], @local}, @private1, [], [], 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x200}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 17:15:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:53 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cgroup\x00') sendfile(r0, r1, 0x0, 0x80000002) [ 990.449563] xt_HMARK: proto mask must be zero with L3 mode 17:15:53 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @timestamp={0x11, 0x11}}}}}, 0x0) 17:15:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:53 executing program 1: unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_getsetattr(r0, 0x0, 0x0) 17:15:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) socket$netlink(0x10, 0x3, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r2, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r3+10000000}, &(0x7f0000000340), 0x8) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000180)=0x93c7) 17:15:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 991.047160] Cannot find add_set index 0 as target [ 991.105289] Cannot find add_set index 0 as target 17:15:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @dev={0xac, 0x14, 0x14, 0x3e}}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001e40)={@multicast1, @local}, 0x10) 17:15:56 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="01a5bc1dec909b2e70e0dcfe88af57688cb402595c34"], 0x9) prctl$PR_SET_PTRACER(0x59616d61, 0x0) ptrace$setopts(0x4206, 0x0, 0x7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 17:15:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x18}]}, 0x2c}}, 0x0) 17:15:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56e2c652ace184e, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) socket$inet(0x2, 0x0, 0xfffffffc) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'veth0_to_team\x00', 0x6}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="00de00000095f9ccb40000000020f9f70dbafdf40e5e17e5aa1bdaabbcb3d81b54fd38b02954d1c54663b60762c5485946e216352281261a271513ea51f3d6af5cb4477437b889863d573567626cb181216afb8efbf465bab97b55f8385ba28b04e5a923594755"], 0x2e) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) 17:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000005c0)="3e0f082e67652e640f01c4672e002066ba4100ecb8005000000f23c80f21f8350400e0000f23f80f1c1d000000000f052e660f383eb3a3000000660f3882913d3e00000f017f35", 0x47}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:15:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x6028089) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086604, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = dup2(0xffffffffffffffff, r2) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000000080)=""/253) ioctl$RTC_PLL_GET(r3, 0x80207011, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x94102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x8}, 0x18404, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x84}, {0xffffffffffffffff, 0x24}, {}, {0xffffffffffffffff, 0x401}], 0x5, &(0x7f0000000300)={0x0, r4+10000000}, &(0x7f0000000340), 0x8) 17:15:56 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000240)={0x7c0, 0x0, 0x10001, 0x20}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000280)={0x10001, r4, 0x1, 0x7c8e}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyS3\x00', 0x40800, 0x0) dup2(r1, 0xffffffffffffffff) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r5, r6, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086604, 0x40000000b07101) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="05d98f9978ebe55a73e722d7ef28df0192de03a081d34cf6", 0x18}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="8c5217f9bd1bf11fc79dfbf22849a25ec0fa6295a701f905b0d2c2b447c902194d8486904331865677dbaf18f197040e298d563aac5caa16282fdb958680bdea3bf95f4b6b5aaf0f6e110abe20d120e381caa4677c29b0028ecded80baa5b2a22199840317ae1f9a797cebabd92234739c0549d3dfc9019255dfba929ff0ac9af73924edd74be3e24c", 0x89, 0x1}) 17:15:56 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x28402) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = dup2(r0, r3) write$vhci(r4, &(0x7f00000000c0), 0x2) [ 993.409587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 17:15:56 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086604, 0x40000000b07101) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000340)=""/79) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000000)={{0x0, @addr=0xfc}, 0x8, 0x0, 0x9}) pkey_alloc(0x0, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x5, 0xda, [], &(0x7f0000000100)=0x4}) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000200), &(0x7f00000003c0)=0x4) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000714000127bd7000ffdbdf2508000100020085973d72a6e81af910f41a681e8e55000008004400", @ANYRES32=r4, @ANYBLOB="0500540001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r3, r5, 0x0) 17:15:56 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000003c0)=""/102400, 0xffffffffffffff3a}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x1a0, &(0x7f00000193c0)="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"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:15:56 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086604, 0x40000000b07101) fcntl$getflags(r0, 0x40a) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') dup3(r1, r2, 0x0) [ 993.655207] ================================================================== [ 993.663033] BUG: KASAN: slab-out-of-bounds in hci_event_packet+0x6c26/0x7324 [ 993.670224] Read of size 6 at addr ffff8880885b7c86 by task kworker/u5:1/28084 [ 993.677602] [ 993.679228] CPU: 1 PID: 28084 Comm: kworker/u5:1 Not tainted 4.14.183-syzkaller #0 [ 993.686926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.696286] Workqueue: hci0 hci_rx_work [ 993.700345] Call Trace: [ 993.703454] dump_stack+0x1b2/0x283 [ 993.707172] ? hci_event_packet+0x6c26/0x7324 [ 993.711670] print_address_description.cold+0x54/0x1dc [ 993.716947] ? hci_event_packet+0x6c26/0x7324 [ 993.721528] kasan_report.cold+0xa9/0x2b9 [ 993.725677] hci_event_packet+0x6c26/0x7324 [ 993.730010] ? hci_phy_link_complete_evt.isra.0+0x6c0/0x6c0 [ 993.735721] ? lock_is_held_type+0x1f0/0x210 [ 993.740144] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 993.745245] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 993.750264] hci_rx_work+0x3da/0x950 [ 993.753981] process_one_work+0x7c0/0x14c0 [ 993.758530] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 993.763210] worker_thread+0x5d7/0x1080 [ 993.767195] ? process_one_work+0x14c0/0x14c0 [ 993.771689] kthread+0x30d/0x420 [ 993.775054] ? kthread_create_on_node+0xd0/0xd0 [ 993.779729] ret_from_fork+0x24/0x30 [ 993.783450] [ 993.785079] Allocated by task 28073: [ 993.788791] kasan_kmalloc.part.0+0x4f/0xd0 [ 993.793110] __kmalloc_node_track_caller+0x4c/0x70 [ 993.798038] __kmalloc_reserve.isra.0+0x35/0xd0 [ 993.802704] __alloc_skb+0xca/0x4c0 [ 993.806417] vhci_write+0xb1/0x420 [ 993.809951] __vfs_write+0x44e/0x630 [ 993.813649] vfs_write+0x17f/0x4d0 [ 993.817167] SyS_write+0xf2/0x210 [ 993.820712] do_syscall_64+0x1d5/0x640 [ 993.824599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 993.829783] [ 993.831391] Freed by task 27118: [ 993.834737] kasan_slab_free+0xaf/0x190 [ 993.838690] kfree+0xcb/0x260 [ 993.841791] kernfs_fop_release+0x10d/0x180 [ 993.846093] __fput+0x25f/0x7a0 [ 993.849391] task_work_run+0x113/0x190 [ 993.853343] exit_to_usermode_loop+0x1ad/0x200 [ 993.857901] do_syscall_64+0x4a3/0x640 [ 993.861790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 993.866953] [ 993.868562] The buggy address belongs to the object at ffff8880885b7a80 [ 993.868562] which belongs to the cache kmalloc-512 of size 512 [ 993.882238] The buggy address is located 6 bytes to the right of [ 993.882238] 512-byte region [ffff8880885b7a80, ffff8880885b7c80) [ 993.894437] The buggy address belongs to the page: [ 993.899345] page:ffffea0002216dc0 count:1 mapcount:0 mapping:ffff8880885b7080 index:0xffff8880885b7800 [ 993.908870] flags: 0xfffe0000000100(slab) [ 993.913004] raw: 00fffe0000000100 ffff8880885b7080 ffff8880885b7800 0000000100000004 [ 993.920862] raw: ffffea0002a154e0 ffffea0002a54e20 ffff8880aa800940 0000000000000000 [ 993.928720] page dumped because: kasan: bad access detected [ 993.934425] [ 993.936030] Memory state around the buggy address: [ 993.940937] ffff8880885b7b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.948273] ffff8880885b7c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 993.955622] >ffff8880885b7c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 993.963392] ^ [ 993.966752] ffff8880885b7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 993.974089] ffff8880885b7d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 993.981433] ================================================================== [ 993.988792] Disabling lock debugging due to kernel taint [ 994.002359] Kernel panic - not syncing: panic_on_warn set ... [ 994.002359] [ 994.009737] CPU: 1 PID: 28084 Comm: kworker/u5:1 Tainted: G B 4.14.183-syzkaller #0 [ 994.018948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.028489] Workqueue: hci0 hci_rx_work [ 994.032462] Call Trace: [ 994.035050] dump_stack+0x1b2/0x283 [ 994.038680] panic+0x1f9/0x42d [ 994.041872] ? add_taint.cold+0x16/0x16 [ 994.045845] ? preempt_schedule_common+0x4a/0xc0 [ 994.050602] ? hci_event_packet+0x6c26/0x7324 [ 994.055105] ? ___preempt_schedule+0x16/0x18 [ 994.059517] ? hci_event_packet+0x6c26/0x7324 [ 994.064012] kasan_end_report+0x43/0x49 [ 994.067985] kasan_report.cold+0x12f/0x2b9 [ 994.072224] hci_event_packet+0x6c26/0x7324 [ 994.076552] ? hci_phy_link_complete_evt.isra.0+0x6c0/0x6c0 [ 994.082262] ? lock_is_held_type+0x1f0/0x210 [ 994.086670] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 994.091776] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 994.096793] hci_rx_work+0x3da/0x950 [ 994.100507] process_one_work+0x7c0/0x14c0 [ 994.104743] ? pwq_dec_nr_in_flight+0x2b0/0x2b0 [ 994.109421] worker_thread+0x5d7/0x1080 [ 994.113399] ? process_one_work+0x14c0/0x14c0 [ 994.117928] kthread+0x30d/0x420 [ 994.121291] ? kthread_create_on_node+0xd0/0xd0 [ 994.125960] ret_from_fork+0x24/0x30 [ 994.131250] Kernel Offset: disabled [ 994.134869] Rebooting in 86400 seconds..