O_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:32 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:00:32 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4c}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:32 executing program 3:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x750}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:32 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2480.578576][T28601] xt_cluster_mt_checkentry: 38 callbacks suppressed
[ 2480.578595][T28601] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='jbd2_lock_buffer_stall\x00', r2}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2480.637467][T28599] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:32 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x8000, {0x8}}, 0x14)
ioctl$TCXONC(r3, 0x5411, 0x0)

[ 2480.737293][T28599] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2480.808557][T28614] xt_cluster: you have exceeded the maximum number of cluster nodes (1872 > 32)
17:00:32 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x50}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:33 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0x2}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, &(0x7f0000000040)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r2}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:33 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:33 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0) (fail_nth: 1)

17:00:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xa00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2480.935896][T28626] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2481.020326][T28631] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r4, 0x5411, 0x0)

[ 2481.125975][T28631] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2481.152103][T28640] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2481.188009][T28648] FAULT_INJECTION: forcing a failure.
[ 2481.188009][T28648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2481.201297][T28648] CPU: 1 PID: 28648 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2481.209705][T28648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2481.219756][T28648] Call Trace:
[ 2481.223035][T28648]  <TASK>
[ 2481.225963][T28648]  dump_stack_lvl+0xcd/0x134
[ 2481.230564][T28648]  should_fail.cold+0x5/0xa
17:00:33 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x55}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2481.235072][T28648]  _copy_to_user+0x2c/0x150
[ 2481.239584][T28648]  simple_read_from_buffer+0xcc/0x160
[ 2481.244964][T28648]  proc_fail_nth_read+0x187/0x220
[ 2481.249441][T28652] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2481.250173][T28648]  ? proc_sessionid_read+0x220/0x220
[ 2481.250205][T28648]  ? security_file_permission+0xab/0xd0
[ 2481.270084][T28648]  ? proc_sessionid_read+0x220/0x220
[ 2481.275374][T28648]  vfs_read+0x1b5/0x600
[ 2481.279551][T28648]  ksys_read+0x12d/0x250
[ 2481.283957][T28648]  ? vfs_write+0xae0/0xae0
[ 2481.288385][T28648]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2481.294293][T28648]  do_syscall_64+0x35/0xb0
[ 2481.298713][T28648]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2481.304607][T28648] RIP: 0033:0x7f6ba5a1469c
[ 2481.309015][T28648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2481.328636][T28648] RSP: 002b:00007f6ba2fd7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
17:00:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x400, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000140))
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x4800)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x4)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:00:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000d9405cf20833"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r1, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x2, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x81, 0xc3, &(0x7f0000000400)=""/195, 0x41000, 0x8, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xd, 0xfff}, 0x10, 0x0, r0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:33 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2481.337055][T28648] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f6ba5a1469c
[ 2481.345028][T28648] RDX: 000000000000000f RSI: 00007f6ba2fd71e0 RDI: 0000000000000006
[ 2481.352998][T28648] RBP: 00007f6ba2fd71d0 R08: 0000000000000000 R09: 0000000000000000
[ 2481.360971][T28648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2481.368939][T28648] R13: 00007fff22a76ecf R14: 00007f6ba2fd7300 R15: 0000000000022000
[ 2481.376944][T28648]  </TASK>
[ 2481.450355][T28658] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:33 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2481.533963][T28668] xt_check_match: 13 callbacks suppressed
[ 2481.533984][T28668] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x16, 0x8, 0x7f, 0x40, 0x0, 0x8, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x20, 0x0, @perf_config_ext={0x9, 0x80000001}, 0x2000, 0x33a1, 0x3, 0x7, 0x3, 0x0, 0x20, 0x0, 0x20, 0x0, 0x248000000000}, 0xffffffffffffffff, 0xd, r1, 0x8)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x1f00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x34)
r4 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
r5 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
syz_open_pts(r5, 0x301)
r6 = syz_mount_image$bfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10001, 0x9, &(0x7f0000000a40)=[{&(0x7f0000000280)="7a40e188c28ccfed3c61970beed17dbd95a136e8bc19eb60235e1611125e2cbc039f12b98ff9734f73c4660a75b73e8bf280e44665fdce391c0922d7fc2db5f78181cc957242068958147bd7a1d06821d51839cd70f3405ca82c9afe3c9579d3a8dd87c67de37f70cef23cc34afba047340bb0839ffd55fe3e70124de03131d2b75a03256d9b6f63691fb3e9918ba3ea6a560a9727f38bcaec3ab89c43c9cd564b46fa9432831a5510c8f7267a99b5c2721a2cd0295a27", 0xb7, 0xbc0}, {&(0x7f0000000340)="dc1c55515ebb46dbe29238074ee55c633735ed8eb904541ac97bd4930fee40094410f50afaa493dbba7214e4a22b746eed98034d7a6bf1ee25efde539aefaf9a9bde2c5cb111a2221a20ad4f9c0ff0bddfb41de00136dd02ef6ad31715c474db4498530b3a7db549634a12ae420c119be45f45083e4353a5c4fbe0bbd6e0fd8d3a246304fc0c3b9a8212cc8b002fa816c68d2299731b7d8ee7f3864795025fc144b07ccd87517d2b4ae1c4c4b537658e9321d80f0c01aac02648ceefabd35df00e5ee0b46c4a0786303092029ddd5ac4b7", 0xd1, 0x1}, {&(0x7f0000000440)="db80ac9b4377132ff2f57208082b0b5763895d66154e713a4c6ca0142b9f33fd830f47183aa0274d8abdaa18c2c307137e42c570f4e818bbd6b2ae6e6b989326102d05846979ca817609c8e4417e773119327dbce373f8303568464c8d11a0cab945bc658b3eb763ab84929cf650d713300ce47fb4c48f0ef3e58b7f16fbe48cdae9fba661bbea3b76da85d15e30e630d80a12f55682250aeb219b40fab23cf35e88039fc3df3ad549cb6cc3661278924dac30dfc73bf5d6c07a65258f63834dffa8fa4203b8aae8f8", 0xc9, 0x100000001}, {&(0x7f0000000540)="e258c5539800f82c6c96b8e775dc425bf322f0713b05a04db1d1835c756f2731bd862e36c5ded554c4de83a66711a9072dc0b8955fdc914d43e50724b17d44b3217d04644d2b68c066654864d338f262c6f2dfe8f74ec212ea84939b6e253a465942b982d532fe0e5ca76ec0027826cc23f7a1c79f72bffc204addcf02b3d9fabf902853e3208c0e30bc6f0c6ab2e9b675468a3abe3e2bca9aca67e32168c1dfc0561b4db1d28f7baeedc456183e05685f705bc1956c2a4937ea3b5dd7c71f12f0498cbd1e217063693ed6b24bb0acac9e22e4978b6a1be12c96e58e8df765726da6ca384d276d4d18e72e58009d822c00cace", 0xf3, 0x9}, {&(0x7f0000000140)="3732859e6eacf79651f4758a9c152f50e647634649f9", 0x16}, {&(0x7f0000000640)="4b37a7136e31d826540a362f020c1f65e555f015d6013a6a08ec93662bc400023859c0eabe40e92375932def60ab2569b4e7b60084b29971cbfab780632691dce58eedb7c6901d19b6267c2a45768b709b22f7863e5c956d083604151773e391dfc2c9f2754732a9b9cec1d5fb8b574361fdbaa34799dd33869503083b82d616ff1639e77b64ce3c471c8a95fb750aabccdec56a9ae0a57808", 0x99, 0x6}, {&(0x7f0000000700)="3a9471b0cc6a9781cbd85358737d6b1fd9b7a383cf83e7f524975ac2563f952a3948aabd4de364e329698296dcc8c0d2612dbaa78558473c22d8f8e5829bf8ac00ea0f37056b30aa67abb58e5e85ca76406cee121cbf5f876a5359523b2feb6522e78d81cc773b515bef607a42441afe358b325a4f618f612af4ce1569d756ead2a8bc028d694fe79ae7b4cf5c0184", 0x8f, 0x9}, {&(0x7f0000000200)="fa3af5fe6af4f08fb50705c92684420819fa86b0fd2d11827c5536178cb4bef58fffdbf7819216a804b044aa65ce0469e8025a41d18b3e468a91ee36a88b0d83", 0x40, 0x9}, {&(0x7f00000009c0)="1c252ed9cc0d577e6542ea17bad3408dd6b1bd6e2d2322d661c9f1b007790cb6d4787ae6ed4a32669874a6502a9e65f9c7dc0c62b6e377b8befa307d8ecbba94dd331cf63c1437e305ef3160c7c06a32962f7e6e672320f87036e1d2e46508cd9e7acfe7c53c715c3179f4", 0x6b, 0x4}], 0x2011002, &(0x7f0000000880)={[{}, {'net/dev_snmp6\x00'}, {'*}%:*]&+\')'}, {'net/dev_snmp6\x00'}, {'&%)$^&.$)*%'}, {'$'}, {'/dev/ptmx\x00'}, {'/dev/ptmx\x00'}], [{@fsname={'fsname', 0x3d, '/dev/ptmx\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/ptmx\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@obj_user={'obj_user', 0x3d, 'net/dev_snmp6\x00'}}, {@fowner_gt={'fowner>', 0xee01}}, {@euid_lt={'euid<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x35, 0x37, 0x37, 0x62, 0x63, 0x62, 0x64], 0x2d, [0x63, 0x36, 0x62, 0x66], 0x2d, [0x38, 0x61, 0x61, 0x34], 0x2d, [0x66, 0x66, 0x64, 0x34], 0x2d, [0x38, 0x62, 0x30, 0x32, 0x36, 0x34, 0x34]}}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]})
sendfile(r6, r4, &(0x7f0000000180)=0x2, 0x1)
sendfile(r1, r1, &(0x7f00000007c0)=0x233, 0x8)
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000800))
ioctl$TCXONC(r4, 0x5411, 0x0)

17:00:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:00:34 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8d02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:34 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x119100, 0x1)
getsockname(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000100)=0xffffffffffffffb7)
bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:34 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x68}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2482.081175][T28707] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x2103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:34 executing program 2:
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x33)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000a0930026922d70b800958574d5fd495cc14d1e3992e69493c441e3af64dfda0234a0b4034d57354490e94ad3abde3d3b22bcd2457ddb23a75bbbb190f689b70f9abb5f5d9319a95a7e09b77ad9b59b484997b08cfcc33d019f0e8d1b03ad8c17", @ANYRES32, @ANYBLOB="5205e334262cef6336b05d1534c2a8d68c4582dcb7f5d1784b901e0b27f0b8591f9ce5bcb6c1e456c1ddd4d6cba2e67bb897b46bd590ecccde5c6ae7d011b237bbb23978907edb12eaa0e34a44181b0598b9f68363c3335f6aa1de178e4c3dcc4332a8fdb72c372c2a449ddc3ae31779719134db2ae143c1321224dd9bbf0eb4d9008df92e5a5efcdf7d67263098a54841f4ea8f7d865b7a7864929498b97d581630a2534291fab58d36a421573b147ed0a3f3e4a8da2cbbbd8d1b3ca3b0cb5c699b9c27d57ef7001a06e682a5593f20af97878f68"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x3)

17:00:34 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:34 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6c}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2482.466121][T28741] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x3)

17:00:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x2803]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0xffffffff}]}, 0x1c}}, 0x0)
r4 = socket(0x200000000000011, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x50, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000400)='\':\x00', 0x3)

17:00:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x7)

17:00:34 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:34 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x74}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x2e01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2482.945473][T28775] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:35 executing program 2:
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@generic={0x0, 0x3, 0x100000001})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000053d92ff13a724b14c5d2af006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:35 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x8)

17:00:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x2)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:00:35 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:35 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x3402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000180)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000340)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000580)="5ca86bb6f713e3bd8450906e6737aa0702a5cfe7edfd72ac876e91ee378e3a031ccbde7dd0d7f7f61c1fca42a10531c5a19d5248823266124df8dc47a11aacdc1bee40c90773789a0542e59db442c0a5977806ee7e2bcef70ff31a0f1c9621bae5724cce55d40e05afe34d265db0d4657f3d632a7e5d256254abb145abf64b4f", 0x80}, {&(0x7f0000000600)="d432aabf45da6f70b61008ffeb8fdaffd912ac796848c3ba7f590390fbeff260058c85f98f58e08532742619507bc2d87cfdc4d83dc61b40714609a580e683e82338b304f60f77cb207690b6e1af8d997d507a9d815fa681d0fa1fee9d08", 0x5e}, {&(0x7f0000000680)="87d299c2b09a9563b08d61bc5609a4f8effeb2dae8eb00ad4553e81d99b4383b6a69d80ac6a4ebc43ecafed1d754ef20ec897190750c33347acc8d2dda12e4cf6be2e25e4a232bc4b3d33ae1d21e81b8bd52e1452423c952e2cface07e0256808245e4919298ea0dfd385e0cfa99f790097dee351b6ea81752f39cbf6136233a8a06c38a8798263251785ffaf85d9c5456e9a71dd8b1f256fd01891d14563b51e8a7eed7f7080e1eaa30d7eb8da3b888e50d90787225d0fed5298e334d888e5cc893b74ac0e79100c4f414aa58268086081c70083fa3ba0dda73be2d8eb9e5bb1f8ed55e1944fed6c46405fe67acb4b75cf4dee3a0fb", 0xf6}, {&(0x7f0000000780)="bfaaf24efec329651c1469663c80dea5e5a42aafdbf6be38888138aea5412240e6e8367cee1adc2720a2480f4421fefc50702aff02786478021e6ee2163b39d426deedb752c4b6e33f32b8163a8a02e6aae8d5778b7764280d0c2f0d980c57843a05e91e55544af4c42d97b2482aadec0190b9bf83171996", 0x78}, {&(0x7f0000000800)="90730a867bf5b9bab4664feea4ec3a7285acdd0f4efcfa9f64311d1138fcb24af819865ec08b7b7cc6d6db6d2b4ee0c33ca2f3935c2ec72bba679ebe834eb93ccfd450b039570df3d9cd6cc0fb5ea895bb57c3854195cf25ab53760c87978ac73edaf7ae97e6aff91da5f5d55a17211fec8dc917beafd83e6af2e4641845f02909cb8aa9cc10b4a386c581e7611b39b85210b1cef777aa3acc4ed7d5d6de845d2d21bbdae136e094", 0xa8}, {&(0x7f00000008c0)="82443117d91933d8b6485a3763f8556a18a0005e69634fb56807a1d157aee825b0187cf82de6ad36b1c98b088d7a50d0143080c1915f980a8421d448f1419e82ff36c1cfbcc9a3fbbce5e6f75cf3c24e4448a79f1683b3f57000d51e296ef8bf82826f6f2e4d7b3749507ac6900fa4863c77157db07fb9e157dbdb2ad5b1490189f41a5bfd6d24de3a32fb6c4e9a478e99bf0c9304e706f5d662080f452e10e8200468e04cd4bae14ee89763078cd05e763ee993c304636e1578de55305cce8d00134a21125f650c4827f7e1a757b9f94bbe0234fad1dee4c71948cced94a643", 0xe0}], 0x6}, 0x4000090)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@exit, @alu={0x7, 0x1, 0xb, 0xa, 0x5, 0x4, 0x10}, @alu={0x0, 0x0, 0xd, 0xb, 0x0, 0x40, 0x8}, @alu={0x7, 0x0, 0x5, 0x9, 0x6, 0x100, 0x10}, @map={0x18, 0xc80357cf4c2000e5, 0x1, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0x8, 0x3, 0x50, 0x10}, @ldst={0x3, 0x2, 0x3, 0x9, 0x6, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xf3, &(0x7f0000000400)=""/243, 0x41000, 0x3, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0x10000, 0xffff}, 0x10, 0xffffffffffffffff}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2483.311774][T28805] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:35 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x300)

[ 2483.413315][T28811] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:35 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x88}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x4301]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:35 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', <r2=>0x0, 0x8, 0x40, 0x7f, 0x10001, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0x200}}}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xc0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0x6, 0x0, <r3=>0x0, 0x0, &(0x7f0000000500)={0x4, 0x4}, 0x0, 0x0, &(0x7f0000000540)={0x3, 0x7, 0x17b, 0x40}, &(0x7f0000000580)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=0x80000000}}, 0x10)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000700), 0x100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x7, &(0x7f0000000040)=@raw=[@generic={0x80, 0x2, 0xf, 0x100, 0x9}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x13}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, @alu={0x4, 0x1, 0xb, 0xa, 0x8, 0x0, 0xfffffffffffffffc}], &(0x7f0000000080)='GPL\x00', 0x5, 0x89, &(0x7f0000000400)=""/137, 0x1f00, 0x2c, '\x00', r2, 0x821053e7d9133d32, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x9, 0x7, 0x401}, 0x10, r3, r4}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:35 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x700)

17:00:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x4800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2483.772090][T28833] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x11)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:00:36 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xe8}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:36 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000a2866f2c81f671"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:36 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x80000)

17:00:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x4c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2484.352510][T28877] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:36 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000006440)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000001980)=[{&(0x7f0000000400)=""/216, 0xd8}, {&(0x7f00000002c0)=""/124, 0x7c}, {&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/133, 0x85}, {&(0x7f0000000680)=""/72, 0x48}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000880)=""/201, 0xc9}, {&(0x7f0000000980)=""/4096, 0x1000}], 0xa, &(0x7f0000001a40)=""/4096, 0x1000}, 0x1000}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002a40)=""/149, 0x95}, {&(0x7f0000002b00)=""/247, 0xf7}, {&(0x7f0000002c00)=""/235, 0xeb}, {&(0x7f0000002d00)=""/49, 0x31}, {&(0x7f0000002d40)=""/213, 0xd5}], 0x5, &(0x7f0000002ec0)=""/28, 0x1c}, 0x3}, {{&(0x7f0000002f00)=@ieee802154, 0x80, &(0x7f0000004000)=[{&(0x7f0000002f80)=""/77, 0x4d}, {&(0x7f0000003000)=""/4096, 0x1000}], 0x2}, 0x80}, {{&(0x7f0000004040)=@nfc, 0x80, &(0x7f0000004180)=[{&(0x7f00000040c0)=""/162, 0xa2}], 0x1, &(0x7f00000041c0)=""/64, 0x40}, 0x9}, {{&(0x7f0000004200)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004280)=""/203, 0xcb}, {&(0x7f0000004380)=""/211, 0xd3}, {&(0x7f0000004480)=""/19, 0x13}, {&(0x7f00000044c0)=""/105, 0x69}, {&(0x7f0000004540)=""/172, 0xac}, {&(0x7f0000004600)=""/207, 0xcf}], 0x6, &(0x7f0000004780)=""/234, 0xea}, 0x80}, {{&(0x7f0000004880)=@nfc, 0x80, &(0x7f0000005a40)=[{&(0x7f0000004900)=""/41, 0x29}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/228, 0xe4}], 0x3, &(0x7f0000005a80)=""/205, 0xcd}, 0x4}, {{&(0x7f0000005b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000005c00)=""/204, 0xcc}, {&(0x7f0000005d00)=""/67, 0x43}], 0x2}, 0x10000}, {{&(0x7f0000005dc0)=@sco, 0x80, &(0x7f0000006300)=[{&(0x7f0000005e40)=""/192, 0xc0}, {&(0x7f0000005f00)=""/22, 0x16}, {&(0x7f0000005f40)=""/94, 0x5e}, {&(0x7f0000005fc0)=""/230, 0xe6}, {&(0x7f00000060c0)=""/228, 0xe4}, {&(0x7f00000061c0)=""/58, 0x3a}, {&(0x7f0000006200)=""/221, 0xdd}], 0x7, &(0x7f0000006380)=""/140, 0x8c}, 0xfffffe00}], 0x8, 0x12000, &(0x7f0000006640)={0x0, 0x3938700})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="851de5006d00000095bc130b913761496c95d84df234db2afc0328f94282b4b7f71c30c789c8acedf69b5fecf62791d7093261bcf4183617e029dbd251384e983c492f026304d4df58c3023e0a20f6c940f00def0ccce6312ea3ac78929bd3490526a1983d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x800)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000066c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000006780)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000006740)={&(0x7f0000006700)={0x14, r4, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:36 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x3000000)

17:00:36 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:36 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xec}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2484.702578][T28905] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2484.793616][T28909] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:37 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x7000000)

17:00:37 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:37 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:37 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_dccp_int(r3, 0x21, 0x10, &(0x7f0000000180)=0x2, 0x4)
r4 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x800)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x24fcfe6c214882c6)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000000040), 0x8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r6)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r4, 0x5411, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa30000, 0x9, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x99096c, 0x6, '\x00', @value=0x3}})

17:00:37 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x128}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:37 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:37 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:37 executing program 2:
add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffb)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000001400)=ANY=[@ANYBLOB="ad87cb06936100000000000000000000009297dbbc1e00000000000000071e49fcf20fb918173b922baee86813d3ce929c30a36cbb0124422b66d72bcf65775ef589a0624288e94699914faeec292c8e22af8656417a09358c41a3e280c7ea0b3ca92cd57f5b041d96c1bae1d7ae90e625465db962247c7093064e9137594b6cdabbb8017c7eb7bfb3529282755e115f0ae099ec88eead1c3fc0bcd83c14b28c64b444b5c28cbf9d942a902829ec83eefddf2e3e318bc6fdd2062ac2f78508e6f59e76a379c680fb4f298aa8ff"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
shutdown(r1, 0x1)

17:00:37 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x7ffffffff000)

17:00:37 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x12e}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:37 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2485.746663][T28964] xt_cluster_mt_checkentry: 45 callbacks suppressed
[ 2485.746681][T28964] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="856300006d95030000000000000056"], &(0x7f0000000000)='GPL\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@newnexthop={0x84, 0x68, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x3, 0x0, 0x14}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x1}]}, @NHA_GROUP_TYPE={0x6}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP={0x2c, 0x2, [{0x0, 0x3f}, {0x2, 0x1}, {0x1, 0xc7}, {0x2, 0x4}, {0x2, 0x7}]}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x84}, 0x1, 0x0, 0x0, 0x8090}, 0x40)

17:00:37 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x6000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x8000000000000)

17:00:38 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2485.927376][T28977] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2486.041710][T28977] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2486.065907][T28988] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000000)=0x30)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:00:38 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x6800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0xf0ffffff7f0000)

17:00:38 executing program 2:
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:38 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x143}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:38 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2486.516233][T29009] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2486.524102][T29014] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:38 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x8}}, './file0\x00'})
r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x41)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x1, 0x3, 0x8, 0x2, r1, 0x8, '\x00', 0x0, r2, 0x2}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:38 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2486.613473][T29009] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x300000000000000)

17:00:38 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1a4}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2486.789685][T29032] xt_check_match: 10 callbacks suppressed
[ 2486.789707][T29032] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2486.797344][T29033] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:39 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="85010000fcff0000ff87289f3ed65f151b5b64a8b04726bf2bba6f65702088d89290e8e868b7c771ef201df7ab03f46926fdcc062eb19a32735211b623cae2f584884a17f42c6ebbb594218be25a001e32f991b9137f44fffcd1f5348bb2d2c9ef89"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = syz_io_uring_complete(0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000480)}, 0x5026a, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x108}, r1, 0x8, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x5, &(0x7f0000000040)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x30}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000080)='GPL\x00', 0x7, 0x5d, &(0x7f00000000c0)=""/93, 0x40f00, 0x28, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xffffff00, 0xffffff4f}, 0x10, 0x0, r1}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000600)={0x7, &(0x7f00000002c0)=[{0xec0, 0x6, 0xff, 0xffffffff}, {0x5, 0x6, 0xf9, 0x1}, {0x40, 0x0, 0x1f, 0x9}, {0xfff, 0x4a, 0x6, 0x38}, {0x0, 0x1, 0x8, 0xee0}, {0x2, 0x1, 0x1f, 0xf39}, {0xa8, 0x8, 0x6, 0x9}]})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
poll(&(0x7f0000000640)=[{r4}, {r2, 0x280}, {r5, 0x1100}, {r6, 0x2020}, {r1, 0x1}, {r7, 0x4000}], 0x6, 0x2)
r8 = openat$cgroup_ro(r1, &(0x7f0000000500)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='bcache_alloc_fail\x00', r8}, 0x10)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2486.977269][T29047] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2487.058401][T29047] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:00:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xa04080, 0x0)
ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x80000000, 0x80, 0x6, 0x200, 0x1, "56501f514356efa5d7ccca6cd09ba1a5b45e8e"})
r3 = syz_open_pts(r1, 0x4000000000000002)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r4, 0x5411, 0x0)

17:00:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x6c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:39 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:39 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x700000000000000)

17:00:39 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1aa}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:39 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d40008095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r1, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x3, 0x2, 0x0, 0x5, 0x3, 0x40, 0xfffffffffffffffc}, @exit, @jmp={0x5, 0x1, 0x6, 0x2, 0x1, 0xffffffffffffffe9, 0xfffffffffffffff0}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @generic={0x7, 0xd, 0x4, 0x800, 0x8000}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0xd1, &(0x7f0000000400)=""/209, 0x41100, 0x0, '\x00', 0x0, 0x26, r1, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x3, 0x106e, 0x400}, 0x10, 0x0, r0}, 0x78)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x7400]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2487.506251][T29071] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:39 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850c00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x2000000000000196, &(0x7f0000000780)=ANY=[@ANYBLOB="18260000", @ANYRESDEC=r0, @ANYBLOB="010000000600000004980500d5939516"], &(0x7f0000000540)='GPL\x00', 0x401, 0xc9, &(0x7f0000000580)=""/201, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x9, 0x0, 0x4}, 0x10}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r1, 0x0, 0xffffffffffffffff, 0x3)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a80)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x6, 0x7, 0x1000, 0x20, @dev={0xfe, 0x80, '\x00', 0x2f}, @loopback, 0x8, 0x10, 0x22c, 0x5}})
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x7, &(0x7f00000009c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x58}], &(0x7f0000000a00)='syzkaller\x00', 0x4, 0x33, &(0x7f0000000a40)=""/51, 0x41100, 0x2, '\x00', r2, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b80)={0x4, 0xa, 0x0, 0x1}, 0x10, 0xffffffffffffffff, r3}, 0x78)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200480)
r5 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
r6 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r6, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x14, 0x2, &(0x7f00000007c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xdec1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000800)='GPL\x00', 0x536, 0x59, &(0x7f0000000840)=""/89, 0x41000, 0x0, '\x00', 0x0, 0x2, r5, 0x8, &(0x7f00000008c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x5ea, 0x80000001}, 0x10, 0xffffffffffffffff, r6}, 0x78)
r7 = syz_io_uring_complete(0x0)
open(&(0x7f0000000500)='./file0\x00', 0x0, 0x8)
perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x0, 0xfe, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x208, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r7, 0x0, 0xffffffffffffffff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xa, &(0x7f0000000080)=@raw=[@alu={0x7, 0x1, 0x7, 0x9, 0x0, 0x3a5d0e502ed3bc39, 0x1}, @func, @map={0x18, 0x9, 0x1, 0x0, 0x1}, @generic={0x9, 0xb, 0x8, 0x6, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0xa, 0x10, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x60, &(0x7f0000000300)=""/96, 0x41000, 0x8, '\x00', 0x0, 0x19, r7, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x9, 0x7e}, 0x10, 0xffffffffffffffff, r0}, 0x78)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:39 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000))

17:00:39 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x7a00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:39 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1c6}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2487.867135][T29104] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2487.902165][T29102] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2487.918883][T29102] CPU: 0 PID: 29102 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2487.927310][T29102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2487.937370][T29102] Call Trace:
[ 2487.940639][T29102]  <TASK>
[ 2487.943555][T29102]  dump_stack_lvl+0xcd/0x134
[ 2487.948142][T29102]  warn_alloc.cold+0x87/0x17a
[ 2487.952814][T29102]  ? zone_watermark_ok_safe+0x290/0x290
[ 2487.958353][T29102]  ? __kmalloc_node+0x62/0x390
[ 2487.963110][T29102]  ? io_schedule_timeout+0x180/0x180
[ 2487.968393][T29102]  ? __vmalloc_node_range+0x574/0xab0
[ 2487.973759][T29102]  __vmalloc_node_range+0x883/0xab0
[ 2487.978966][T29102]  ? vfree_atomic+0xe0/0xe0
[ 2487.983455][T29102]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 2487.989255][T29102]  ? __ldsem_down_read_nested+0x850/0x850
[ 2487.994968][T29102]  ? __wake_up_common+0x650/0x650
[ 2487.999981][T29102]  ? n_tty_open+0x16/0x170
[ 2488.004388][T29102]  vzalloc+0x67/0x80
[ 2488.008276][T29102]  ? n_tty_open+0x16/0x170
[ 2488.012677][T29102]  n_tty_open+0x16/0x170
[ 2488.016911][T29102]  ? n_tty_set_termios+0x1010/0x1010
[ 2488.022190][T29102]  tty_ldisc_open+0x9b/0x110
[ 2488.026779][T29102]  tty_ldisc_setup+0x43/0x100
[ 2488.031449][T29102]  tty_init_dev.part.0+0x1f4/0x610
[ 2488.036558][T29102]  tty_open+0xb16/0x1000
[ 2488.040974][T29102]  ? tty_init_dev+0x80/0x80
[ 2488.045472][T29102]  ? rwlock_bug.part.0+0x90/0x90
[ 2488.050414][T29102]  ? tty_init_dev+0x80/0x80
[ 2488.054910][T29102]  chrdev_open+0x266/0x770
[ 2488.059322][T29102]  ? cdev_device_add+0x210/0x210
[ 2488.064249][T29102]  ? fsnotify_perm.part.0+0x22d/0x620
[ 2488.069621][T29102]  do_dentry_open+0x4c8/0x1250
[ 2488.074376][T29102]  ? cdev_device_add+0x210/0x210
[ 2488.079303][T29102]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2488.085535][T29102]  ? may_open+0x1f6/0x420
[ 2488.089942][T29102]  path_openat+0x1cad/0x2750
[ 2488.094529][T29102]  ? path_lookupat+0x860/0x860
[ 2488.099286][T29102]  ? perf_trace_lock+0xeb/0x4d0
[ 2488.104130][T29102]  ? check_path.constprop.0+0x50/0x50
[ 2488.109497][T29102]  do_filp_open+0x1aa/0x400
[ 2488.113991][T29102]  ? may_open_dev+0xf0/0xf0
[ 2488.118491][T29102]  ? rwlock_bug.part.0+0x90/0x90
[ 2488.123422][T29102]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2488.129650][T29102]  ? _find_next_bit+0x1e3/0x260
[ 2488.134493][T29102]  ? _raw_spin_unlock+0x24/0x40
[ 2488.139337][T29102]  ? alloc_fd+0x2f0/0x670
[ 2488.143665][T29102]  do_sys_openat2+0x16d/0x4d0
[ 2488.148343][T29102]  ? build_open_flags+0x6f0/0x6f0
[ 2488.153363][T29102]  ? __context_tracking_exit+0xb8/0xe0
[ 2488.158813][T29102]  ? lock_downgrade+0x6e0/0x6e0
[ 2488.163660][T29102]  __x64_sys_openat+0x13f/0x1f0
[ 2488.168504][T29102]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2488.173437][T29102]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2488.179332][T29102]  do_syscall_64+0x35/0xb0
[ 2488.183739][T29102]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2488.189629][T29102] RIP: 0033:0x7f6ba5a14a04
[ 2488.194031][T29102] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44
[ 2488.213627][T29102] RSP: 002b:00007f6ba2fd6cc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[ 2488.222027][T29102] RAX: ffffffffffffffda RBX: 00007f6ba5b74f60 RCX: 00007f6ba5a14a04
[ 2488.229988][T29102] RDX: 0000000000000002 RSI: 00007f6ba2fd6d60 RDI: 00000000ffffff9c
[ 2488.237945][T29102] RBP: 00007f6ba2fd6d60 R08: 0000000000000000 R09: 000000000000000e
[ 2488.245901][T29102] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2488.253859][T29102] R13: 00007fff22a76ecf R14: 00007f6ba2fd7300 R15: 0000000000022000
[ 2488.261832][T29102]  </TASK>
[ 2488.265108][T29102] Mem-Info:
[ 2488.268220][T29102] active_anon:287 inactive_anon:396080 isolated_anon:0
[ 2488.268220][T29102]  active_file:9641 inactive_file:137713 isolated_file:0
[ 2488.268220][T29102]  unevictable:768 dirty:214 writeback:0
[ 2488.268220][T29102]  slab_reclaimable:26626 slab_unreclaimable:163370
[ 2488.268220][T29102]  mapped:65078 shmem:10376 pagetables:137666 bounce:0
[ 2488.268220][T29102]  kernel_misc_reclaimable:0
[ 2488.268220][T29102]  free:590694 free_pcp:16585 free_cma:0
[ 2488.310859][T29102] Node 0 active_anon:1144kB inactive_anon:1135580kB active_file:27620kB inactive_file:548984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:260312kB dirty:324kB writeback:0kB shmem:39000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 618496kB writeback_tmp:0kB kernel_stack:20988kB pagetables:52108kB all_unreclaimable? no
[ 2488.342800][T29102] Node 1 active_anon:4kB inactive_anon:448740kB active_file:10944kB inactive_file:1868kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:532kB writeback:0kB shmem:2504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:140768kB pagetables:498556kB all_unreclaimable? no
[ 2488.373479][T29102] Node 0 DMA free:10824kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:2820kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:204kB local_pcp:104kB free_cma:0kB
[ 2488.401197][T29102] lowmem_reserve[]: 0 2647 2648 2648 2648
[ 2488.407030][T29102] Node 0 DMA32 free:44460kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:1144kB inactive_anon:1132760kB active_file:27612kB inactive_file:548984kB unevictable:1536kB writepending:324kB present:3129332kB managed:2718872kB mlocked:0kB bounce:0kB free_pcp:40584kB local_pcp:18488kB free_cma:0kB
[ 2488.438044][T29102] lowmem_reserve[]: 0 0 0 0 0
[ 2488.442773][T29102] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2488.469250][T29102] lowmem_reserve[]: 0 0 0 0 0
[ 2488.474013][T29102] Node 1 Normal free:2307492kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:4kB inactive_anon:448740kB active_file:10944kB inactive_file:1868kB unevictable:1536kB writepending:532kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:24752kB local_pcp:1256kB free_cma:0kB
[ 2488.504495][T29102] lowmem_reserve[]: 0 0 0 0 0
[ 2488.509216][T29102] Node 0 DMA: 4*4kB (M) 1*8kB (M) 9*16kB (UM) 11*32kB (UME) 3*64kB (UME) 3*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 0*4096kB = 10824kB
[ 2488.525461][T29102] Node 0 DMA32: 3*4kB (UME) 0*8kB 56*16kB (UME) 585*32kB (UE) 204*64kB (UE) 44*128kB (UME) 18*256kB (UME) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 44460kB
[ 2488.541600][T29102] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2488.553142][T29102] Node 1 Normal: 1*4kB (E) 2*8kB (UE) 3*16kB (UME) 1*32kB (M) 1*64kB (U) 2*128kB (UM) 2*256kB (UE) 1*512kB (U) 0*1024kB 2*2048kB (UM) 562*4096kB (M) = 2307492kB
[ 2488.569397][T29102] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2488.578985][T29102] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2488.588328][T29102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2488.597934][T29102] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2488.607285][T29102] 61027 total pagecache pages
[ 2488.611949][T29102] 0 pages in swap cache
[ 2488.616309][T29102] Swap cache stats: add 0, delete 0, find 0/0
[ 2488.622370][T29102] Free swap  = 0kB
[ 2488.626138][T29102] Total swap = 0kB
[ 2488.629851][T29102] 2097051 pages RAM
[ 2488.633649][T29102] 0 pages HighMem/MovableOnly
[ 2488.638380][T29102] 383924 pages reserved
[ 2488.642530][T29102] 0 pages cma reserved
[ 2490.213816][T29102] pty pty26: ldisc open failed (-12), clearing slot 26
17:00:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r2, 0x540a, 0x2)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:00:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000040)="2f435c0ae5936d1a4b83c43e4d3599603a8b2bb93d0661758671b06e2dcbdd30f52c8d5569536585e8da11141a55df7e", 0x30}, {&(0x7f0000000400)="ee3b8f4e44da1e9abbff18b99017043bb91d63b9c462dee52509192247e712b82b19e9a01cf2d30da90c78cab64010c51a252dc5bf2af4842048d227f92fb778a1f47d7319edb45e02480b36ecf4877761a3b210930505ec15eebe77b15c3a266a81b455d63405a8bb15c834d74182cd77e46126b53693ce0659aa3936f85e62eb315e35e92805d64ded1479cfebfbc89c06d6f6efeaaeddf33cd32099a1d2ad286aa9e20a74ce6d4099833d6a87de354d5d3f21c77fd54a0d686edf3c1c361e4bcb44861bfe30b71ebe61914d80e1141f4e", 0xd2}, {&(0x7f0000000500)="debcc1f9b42ceeeabe7550df7734763b477bd8578ca72a58b2f7d020e3e7c5f10da34c252e49d37e16e78c5d38141e1bed22c6720c8358791520f07ea13869a0fa0255f3b931649b518c3a0bfa01c720c4019e3149447657ec91331c41e7cb2221a01b6802e56560c7f72d89042244d52bc00a9ec76293b1c815a6ed4656f8514cd540d2df4cb8581eb153df54ec2dd8698c3cdf4df076556b87e757279b803ac03d19d7de1b14acf11678b961190904f607e3e64c04ea3f633b55e1d2e62eb7570b22464a1325f5353df1a8f9ba651d8982fdac604596e8f2933ac1ea37c47a2280335e05d8a6", 0xe7}], 0x3, 0x6)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:00:42 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:42 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:42 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1ca}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:42 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCFLSH(r2, 0x540b, 0x2)
r3 = syz_open_pts(r1, 0x4000000000000002)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2490.441296][T29142] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:42 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:00:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0)
write$binfmt_misc(r2, &(0x7f0000000400)={'syz0', "4b714f342e5d97656473092e75915480fb8a6fc624ef9b40f4e90cead9142936e90bb6099a4cea4035c02bfc04f40219f08e4c25c52e9dca22a057964cf1ad88edb70bd91ecbd08cf28188e2b7f75f54e5dce12c63790a702557f57ace3699a21a653be6a1fe9b6fedd4a075d94d89a8d4e46aa4c15b5ae4d1cef3fb80d5e736c65437f9f8cc13ecaa9ca072e33c6ed97f84e5729f9c268f292474c82674118581cfdd43a1622b0980ef3c60c557d8fc5c7e9daf08f1ddd0e279f3ab18d6ae778486b38322c834ced9dc2eb3e88191ec96e163ba10358c35f808"}, 0xde)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2490.505878][T29149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:00:42 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:00:42 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="070100e76a020000d1010000070000008a010000000000000000000000000000b7c972ac2568e6eac33ecf53948f409ba0a4203f4008d668d69c38287a0f06df1c22b871960eaa512d8257bef034b82c286ece5f7b40f381e6760c72d3b00889d91edba619c7f26e38feac2200f5895d4762ef6270de03c6847a402352af732800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d9d437250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003d6300"/2432], 0x980)
write$P9_RATTACH(r0, 0x0, 0x0)

17:00:42 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x234}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2490.795730][T29175] xt_cluster_mt_checkentry: 14 callbacks suppressed
[ 2490.795749][T29175] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2490.821605][ T6488] cgroup: fork rejected by pids controller in /system.slice/ssh.service
17:00:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x800)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)

[ 2490.855110][T29174] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2490.905577][T29182] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:03 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0xffffffffffffff66)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000280)={0xd, 0x1})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ppoll(&(0x7f0000000000)=[{r0, 0x404}, {0xffffffffffffffff, 0xa088}, {r1, 0x104}, {r0, 0x4000}, {r2, 0x41}, {r3, 0x6421}], 0x6, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={[0x3ff]}, 0x8)
pwritev(r0, &(0x7f00000012c0)=[{&(0x7f00000002c0)="6d868813fd86efb942d0830d2c01969aeb4bd5acd35103c28a0e96e67d0d07a7447bf87eee29a828b73516086f893d005268e31c32131ffd0b5a3bfa06fbffa26976ca0c09bb9a1908528504a93066ad32e62c14666074af1a507638835bea8caa1a26563c9a757cbf283a5a11965aeab26c2c7fa43a071d5b1e90f473c9249026122beaf31004cd3a35e076e8d63dc57da223f46052fc3613af5bbc13aa3bb9e0f22dee66c4df8d86a5a23b7c3de1c01f4b8046a915a5cb354e5ce4f9009c0628b214c1b567349759c38953001cf5201169b69e03079d3baf3ef2621a9e22a480d6f6dc68a8f9c03f80c2cddd0ae3d40cb6b0acedc2b5ad3b13379e1d014a645379669dc33936e693548fbc94b449afe65314dbedadfda65d867f9e1ed000197da0b8e2bfb230d002c95d5ef5f4246133cc927e18ccb0983bb25eeb8487c6db83672f15f45cbbf3c06614f2725b6f63748c063d8ade64c640d9619bc1571226b06dba79fc7dc0214ece0f9d2a56146e496559e6028fd351944cc7afc796ccfa61039bc4cb5c6a536413ebc77d11a934eb688d57938624d49dde5bab04f7cbb0613c8113bc51702e366cf1ad6656514ba02dd87d905fb126780dc99aa2f9d3d9c5be76e0703960fd6e0e1c8029b4efcaf220e6351944eb976b4dcd5374b13e27dc13bfed5cff29cf7539b7b19d7af1aaa89c18cc87bd45c0d51125db4452a5024a01112f304a6b462b200fef9b755aa4ac1cb018a7398430e29cead698890e4079e8202e6bfbbd502969c0832455e9cd58da9373577b23bf581b5cfe979577c607ee216c0bf98e2bb87e8743e0ba33c539b0c989c07eff9c308c7af721af64dde9fc9f04c47997a796c4e78e9c57f1fe7285198eca003f4b2fe4b48daa32fe58ea41e4470faab88b87aa55363804971f634520cdd7eb5a75aea00ef2c27db413abb67497122da02c2622e204db6ba5fe968d50e77331018a7fada4740950e3fb65c684141705db714eb268db30fde48645f23d1a1a7856bb1cff0290494d4415dc1d0ada451d1126cd4cc4b529b176bbc900071f4059363c7fd0f6cb5bd934d19dd68b7f90674acb65784da2182612c44ecb48ba44d516a094880508f0377b8257c0dd6680dcd0ddf36befebf38ea920aa2f87243608376c8e1bcbda2246f96aa44eb7fc1b503c62401be83a097b6a847cb79b0e2fc1a6c93ef01da4442b1f873e9f4d8cc2f76592f1c0480fac6a5e4b31fed78db1c220f52d1563065e9d716f9e2b67d840fbd042148d42a982cf9332257cc0fd13c043f33ee596dabdffe01a86935a152a93de1adcc292814e31e0289fb1f4fe7677f3e00688bea45bee91556c51074d6434524f588f4acfcb1dbf2c61bfac87a3eb5770be15612f72fdf8468ae1b7087784cbbbcf07c680a2f381307e6a749d6069f1af0428f7c9adf562d8f74a13c471b0886da9707e5c22ac25d4ff75531bde428dc3d92f12ef9cecffd882c5abb8f3a5d384aeb1092ebcdf016ea33df6f6ab6b733c2bc0be639c31b58633691de4245fd8aca646cc695513f1a206bd1b3eba6111117466f62d8cae7db4858ee7cb589a08d2ea4ddfb81a9ecfcba3efb8f4c54728472fdc96e198bbabd833512d42896f12495eed99875b486aca4a329ebe5463bb295e718bda3ffa969b2146e8ccf6a2ebfc72c5287795f1c419ca4f1c1b9329300fa656bab330b20fca253fb5b8780e1e89a5ed165bfc4dec03db85e0d24ea47f82330d1cf401ca76a96e4606bc325b77de1a134c9a33091d5b8baaae8ff3d1fa795bdefa88fd57062ce6f20187cb009618d2e72cd33452f4f966483187f5723b071a4ee587ad05a88b9a84896b21b9b3dc75410a43ec807345cac0e0c6304a61ef83b042527b00f5de8bae173b14bc924089f076e81513ed7f863b895e3d5a9c577c9d12284389e58e78913daca6042d778ac1080f539f73cc80cd482ca06f3a9d5bef56cfef9621268c815539d196241bb31ec78a7042db5508ba75644bc0dca16429c8bbce55b20f18012fba0f90c6fb4447ab9555a97e1353bc55178d9d6c2aec8f696da2b47903b917dcdf13f9bb22cfef66671e8ffe40c9fccd677a98034b9f08f374f86ebd8b2e425e20ce1ee6940f76b79fc495fc9c262e431a7d754fb5c4b1ee0a9a1423a3efe5bfd822d2ecd73cee6048bade7fa6dedaf177febee19ca0908c88c1c6a8604a6e9696bc48c19397641db0a56c31094a470b2d56792971f2d7707c41e4c6fd2681c8574afc0531f74a31e446fd317348004c78a5066c966981b924dd78ece5c99afffa0ec6c745c7faf934d4685ee403ccad1bef33c807a69db1a4fc5277f6912b863cd274f3e84f641e13aef104c464827800a444d250dc718264bc26c80fbf269f99c3236c83e831931dcebff7b9cc3440e91b21a23a613b743844d35e03a13b87aeb2966f5678cc47830b72801df3720ca2263b40ebfe66d1ff22c9673191f73f56d68de1613938904fbd633807becd01b284894745059b50f6995a301de30ffb39bc6972c17aec2983fb5e2eeef30b01530253e1932df7a291fbc9a8a5e6939369851c48878ab6ec88d5aec983e52a40e43b3bcbf5a1b4591e7b1c16a05051043e89cd5744853e72a4855e4051a7d411bc2945766110f1d22e3b4d2a17664a8817793c1e3e7e9554ee77d171522efb22f56d4acee193ac81a7397cf4f8698d37cfd5a20f3d48b1e19e256f9842b671f1b7863463779991b79914a4cf90727bbe8dbd37855c40535a9877a9a54f4a4984dcf4607ae920fa59d6a6b44d704b0ae0e6ee49982cfc6a4ac8d7b79fded1e967281dec33ca46cf9b371a2d990d9e48abdd384b56f30ac5f04141fe1f70ec075b8b17b32f468b01f45ea470725008ed8711434b858c8cb130a5a0176d84d9382789d628945e51e459cc387461e706cfea144cbe75b182945ec020f90a71a2b4fb0e018968e8907d2be4f69239f8c6444b0e0322cfda6b58531db477b83dce936b82b3d9821cf673480cb8a9022f3766ad348f161cb34f70398d0cbbf408f257c286d65bd9bfcf0a1d16b41f31bbc0c492de3d2fdd6546b15d27146b863e4074bb8d48ff140115b92d2282eb6dbec47fc93cb48c655ac1ca75fd9745171791bff364932aceeeddfa773710638f6fe9494393a3bba642e31a2e2d3f0499513cf925cf19b6503fcaae0f461b4fae300a57263a9d10d4822f64e24a281ef2fd8f174950220b9c32658c29ad680a0dde968ba11fae833617771e1ec21d9b293f8448d7a332e586e7c700e97478fe1b0fbf61e6d91f467f0c2a9868653eb891545a1371114f8da973175493808a882a9b68e10bd19be3eaa12120cde8472e99f8c6c7f7d0974b67d575bc4fed78e5949b4ccacc28eb269afd0820f7446be698f53b38b9af8771a94aaaf1013457b560da9c86c148a31ee26376bb93f3c57ea217e600a9cd1909247e1a9fd0d8432a0bd68f44b2455ba0449a40875eb381c33d1493d53cf2822aed754b94f9b14bc15d7d6219d66da1b2684c8432e8ee0981b6bd6a0b3fb1dd719d3aef65c168aa33fd02df73c8fb7229f499f0ab4c35b6b39165a1fc0eac6e00886e13e6fef6eef7af65794ea40787a867dc86bf25a1560d5958271a68957f296c5611d0f5c5776b0b7549652fc6ecca12835112c9c02c18ddecf9278a03c55211c5dbc6d08292d8c5309d06f1aa5da581b3390896d47ea9f817a3c46c2285ca2976a3157f7158ba7fa2e54dd83a1c1cd7f387a662ef05e6696ed47353a3517f84ebe162ec2fb8ccce9fc4264c066dfd222cde09b2222d6127028f9794c3d10b0773e1a19f8a85ff77685c320facf0e9e38fd76ebc8450fb68da6afbc6661edebc3b0e8894165d83f3757b4009cb099fde3de58521066d3fc94fd4249facc87a713857a2499c0d3b3d7782fce97de0bbd6e4eb4d8cd5d331713d779a0110fb872a09531ecdcf20237156e46a39c339d45b493989e4953b060f40246db23831559745d7fdf73505e67d43a26bad0b51256b507140fe34ca10bd486e6f35497d3d0adc316158e410da48e8441f6128149ad5402abe11f8a184d55547e75613b5f9d8e64063b5fedf8c888ea245e31ba6bbe2a194c1d89d0d82fa04ebbdf00b20a2039ff4701adaee20f529d0ba4c72e9d08caf8449c82be84a2129b236379c9317713a8072893cab58fd90e49a6930a6bcad2894ae8ae7b91ff73d305403a7f857bf584c265b3469e597b4a43624b28db9dbc55b05ccfffdf5782ead35f0913cb2ea882ee7ba78bccd1a66d6956c42cbabdee8f3ea950e1bb05324782bca0386043af183bb26cf00df08018229e05cb03f216a91b1d24e925e38042b215dbbed2649a7dd333b30579983715afada53ea9aa21c78c0ec00b7bba3e74ee11d8b7cef605bb633a8a967c8129cbb376ba77272d6fb887d960f98a240e9e453cbd0299c09e92729b400f050e94ea3ecefdebc1dd65fa665040c0c39e5afa90bdb62441312f3728a874f0919f8446a1a84ddd5322655b1bd3147f3cc0dee505bbe12c5fb96687654cb5a03ae7abf2fa3e0954114caaa42174608e5a370a05451bceefbd032503d1320e3a238c1dd8b088e1fc3cf4b46feae16601ad3546b28f7da763211a4bc27473585cccc953d54fa3b5e8e5fdfc992e00ae7dae3d0a9fe6a583d4ed31ec08993751b0d9219af5787d8baed6994115f3f4076cb69b972fd4990fe3a6d7b30f325c82fd286d3b34535ec665bcc632f2dff3aa86f21e85896f9a7a2ce5cd2fabec15cfa3bf53225e4385efd4653d34ba842097cdad9068937bc48662f9d7c2919554cb73209f825541d1604a484e642720cbff00700910dbb562421345363ad5d9e9b0af2897c871b57172d88af63833470be515fc66167b39f63011ae00f57b70aa241223bb4510db283d3ac9a3cc127884d6cdfd904c2a786b7968e1afb0a0ef81526956d3213e6376c62aadd72c71215b12d669c3dad9a7c13aec2c76f3fb71989048010fc2426746ac446bfc12905ef731ecfedf547748c96cf75ff995f3b1b1cb540d773b543679bfff9fcfbb26e147b2e3b05cf49035a2ed012adc2e138ba74a95b631d5ea922fb1db71532d635c024c5254bb581e936c6291845549217e778f6768a87bfee023c734dac44c6e554d078ab8f19aa51ae3ce40280445707ce12095be3db88b31719f9a650070ddaeca4df166a0e2446b1d9042bed2cc476ae3c16898a71eb0896aa0ebcd76fdb6d499e53c69671cb6938e2931ce80b19b7dc1a261a71621d9e1f46d573f0db97d54e193ae3622498a4d982ac70b68363eadc893ebdc927a8ae966473b36479a1701304225f7a1ddc1ec19ab075bcd1e4519964ba465ee0a7c71e59e9e1e81d20fde9617cd08efe4c80e5872fbfdd27387ed14a76cc4aad25eb5521d8e33faadc7682240259b078c706005697d02b4c38c58ef71d67fde25a52927af2a05df4c18f4e1b8f7dafcf455683982e2f5cd25a1e6b46f192ba880a7b24945588f70fe77321ce52da4733852a473f8b466c6cce5a5a70dd0ac43e703229692a4e9792a4974744de721555d9d2431653662181fb33a21b7766ea1e5459331734d08f1d59c3b057ab3772e308e5af39796b8fd12e9cca44da48f8bc5504c73628e7f034b35cc059f40020fb9ad9e6857573ef1af5ed22064b44dc8779b6bbde263156f8f66fa9cc903e4ed6e3fed2b799c71611d6400b1df7abdb02393335ee2260d94005540febc480a7c594462b2073caf040d52aa02b83b785df0c", 0x1000}], 0x1, 0x2, 0x1)
r4 = syz_open_pts(r1, 0x4000000000000002)
r5 = dup3(r4, r0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000001300), &(0x7f0000001340)=0x8)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x1, {0x4}}, 0x14)
ioctl$TCXONC(r5, 0x5411, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xfe, 0x3, 0x4})

17:01:03 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc, "200000e0c455ac00"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:03 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:03 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2511.453040][T29195] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2511.469176][T29194] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:03 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x9002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:03 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00007040"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:03 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0x3, r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ftruncate(r4, 0x5)
keyctl$read(0xb, r3, &(0x7f0000000080)=""/133, 0x85)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2511.767099][T29208] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2511.783627][T29208] CPU: 0 PID: 29208 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
[ 2511.792224][T29208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2511.802290][T29208] Call Trace:
[ 2511.805574][T29208]  <TASK>
[ 2511.808502][T29208]  dump_stack_lvl+0xcd/0x134
[ 2511.813103][T29208]  warn_alloc.cold+0x87/0x17a
[ 2511.817798][T29208]  ? zone_watermark_ok_safe+0x290/0x290
[ 2511.823353][T29208]  ? __kmalloc_node+0x62/0x390
[ 2511.828138][T29208]  ? io_schedule_timeout+0x180/0x180
[ 2511.833446][T29208]  ? __vmalloc_node_range+0x574/0xab0
[ 2511.838830][T29208]  __vmalloc_node_range+0x883/0xab0
[ 2511.844047][T29208]  ? vfree_atomic+0xe0/0xe0
[ 2511.848550][T29208]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 2511.854361][T29208]  ? __ldsem_down_read_nested+0x850/0x850
[ 2511.860093][T29208]  ? __wake_up_common+0x650/0x650
[ 2511.865126][T29208]  ? n_tty_open+0x16/0x170
[ 2511.869549][T29208]  vzalloc+0x67/0x80
[ 2511.873456][T29208]  ? n_tty_open+0x16/0x170
[ 2511.877877][T29208]  n_tty_open+0x16/0x170
[ 2511.882124][T29208]  ? n_tty_set_termios+0x1010/0x1010
[ 2511.887411][T29208]  tty_ldisc_open+0x9b/0x110
[ 2511.892009][T29208]  tty_ldisc_setup+0x43/0x100
[ 2511.896693][T29208]  tty_init_dev.part.0+0x1f4/0x610
[ 2511.901817][T29208]  ? pty_unix98_compat_ioctl+0x50/0x50
[ 2511.907287][T29208]  tty_init_dev+0x5b/0x80
[ 2511.907582][T29215] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2511.911626][T29208]  ptmx_open+0x112/0x360
[ 2511.926234][T29208]  ? pty_unix98_compat_ioctl+0x50/0x50
[ 2511.931702][T29208]  chrdev_open+0x266/0x770
[ 2511.936134][T29208]  ? cdev_device_add+0x210/0x210
[ 2511.941085][T29208]  ? fsnotify_perm.part.0+0x22d/0x620
[ 2511.946475][T29208]  do_dentry_open+0x4c8/0x1250
[ 2511.951340][T29208]  ? cdev_device_add+0x210/0x210
[ 2511.956295][T29208]  path_openat+0x1cad/0x2750
[ 2511.960913][T29208]  ? path_lookupat+0x860/0x860
[ 2511.965684][T29208]  ? perf_trace_lock+0xeb/0x4d0
[ 2511.970548][T29208]  ? check_path.constprop.0+0x50/0x50
[ 2511.976028][T29208]  do_filp_open+0x1aa/0x400
[ 2511.980548][T29208]  ? may_open_dev+0xf0/0xf0
[ 2511.985076][T29208]  ? rwlock_bug.part.0+0x90/0x90
[ 2511.990025][T29208]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2511.996280][T29208]  ? _find_next_bit+0x1e3/0x260
[ 2512.001143][T29208]  ? _raw_spin_unlock+0x24/0x40
[ 2512.006005][T29208]  ? alloc_fd+0x2f0/0x670
[ 2512.010355][T29208]  do_sys_openat2+0x16d/0x4d0
[ 2512.015045][T29208]  ? build_open_flags+0x6f0/0x6f0
[ 2512.020082][T29208]  ? __context_tracking_exit+0xb8/0xe0
[ 2512.025639][T29208]  ? lock_downgrade+0x6e0/0x6e0
[ 2512.030506][T29208]  __x64_sys_openat+0x13f/0x1f0
[ 2512.035457][T29208]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2512.040504][T29208]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2512.046682][T29208]  do_syscall_64+0x35/0xb0
[ 2512.051118][T29208]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2512.057028][T29208] RIP: 0033:0x7fd2b87e0ae9
[ 2512.061644][T29208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2512.075177][T29222] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2512.081367][T29208] RSP: 002b:00007fd2b5d56188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2512.081395][T29208] RAX: ffffffffffffffda RBX: 00007fd2b88f3f60 RCX: 00007fd2b87e0ae9
[ 2512.081411][T29208] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2512.081427][T29208] RBP: 00007fd2b883af25 R08: 0000000000000000 R09: 0000000000000000
[ 2512.081442][T29208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2512.131311][T29208] R13: 00007ffcc345574f R14: 00007fd2b5d56300 R15: 0000000000022000
[ 2512.139317][T29208]  </TASK>
[ 2512.142416][T29208] Mem-Info:
[ 2512.145554][T29208] active_anon:287 inactive_anon:294501 isolated_anon:0
[ 2512.145554][T29208]  active_file:9647 inactive_file:137723 isolated_file:0
[ 2512.145554][T29208]  unevictable:768 dirty:256 writeback:0
17:01:04 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2512.145554][T29208]  slab_reclaimable:26558 slab_unreclaimable:148474
[ 2512.145554][T29208]  mapped:65093 shmem:10376 pagetables:61997 bounce:0
[ 2512.145554][T29208]  kernel_misc_reclaimable:0
[ 2512.145554][T29208]  free:807629 free_pcp:16313 free_cma:0
[ 2512.187947][T29208] Node 0 active_anon:1144kB inactive_anon:989812kB active_file:27620kB inactive_file:549004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:260392kB dirty:652kB writeback:0kB shmem:39000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB kernel_stack:17100kB pagetables:38096kB all_unreclaimable? no
[ 2512.219835][T29208] Node 1 active_anon:4kB inactive_anon:188096kB active_file:10968kB inactive_file:1908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:324kB writeback:72kB shmem:2504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:58420kB pagetables:209772kB all_unreclaimable? no
[ 2512.250679][T29208] Node 0 DMA free:13236kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:620kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:180kB local_pcp:80kB free_cma:0kB
[ 2512.278411][T29208] lowmem_reserve[]: 0 2647 2648 2648 2648
[ 2512.284232][T29208] Node 0 DMA32 free:243884kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:1144kB inactive_anon:989192kB active_file:27612kB inactive_file:549004kB unevictable:1536kB writepending:652kB present:3129332kB managed:2718872kB mlocked:0kB bounce:0kB free_pcp:44020kB local_pcp:22168kB free_cma:0kB
[ 2512.315598][T29208] lowmem_reserve[]: 0 0 0 0 0
[ 2512.320324][T29208] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2512.339711][T29225] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2512.346897][T29208] lowmem_reserve[]: 0 0 0 0 0
[ 2512.346948][T29208] Node 1 Normal free:2975240kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:4kB inactive_anon:188096kB active_file:10968kB inactive_file:1908kB unevictable:1536kB writepending:396kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:28040kB local_pcp:10712kB free_cma:0kB
[ 2512.347016][T29208] lowmem_reserve[]: 0 0 0 0 0
[ 2512.347061][T29208] Node 0 DMA: 68*4kB (UM) 9*8kB (UM) 14*16kB (UM) 14*32kB (UME) 9*64kB (UME) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 13240kB
[ 2512.414435][T29208] Node 0 DMA32: 4146*4kB (UM) 1567*8kB (UME) 1175*16kB (UME) 2085*32kB (UME) 457*64kB (UME) 125*128kB (UME) 41*256kB (UME) 5*512kB (U) 0*1024kB 28*2048kB (M) 3*4096kB (M) = 242576kB
[ 2512.432601][T29208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2512.444158][T29208] Node 1 Normal: 40145*4kB (UME) 21256*8kB (UME) 9187*16kB (UME) 3642*32kB (UME) 811*64kB (UME) 111*128kB (UME) 11*256kB (UME) 2*512kB (UM) 1*1024kB (M) 6*2048kB (U) 561*4096kB (UM) = 2975284kB
[ 2512.463370][T29208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2512.472979][T29208] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2512.482322][T29208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2512.491931][T29208] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2512.501387][T29208] 61048 total pagecache pages
[ 2512.506108][T29208] 0 pages in swap cache
[ 2512.510255][T29208] Swap cache stats: add 0, delete 0, find 0/0
[ 2512.516365][T29208] Free swap  = 0kB
[ 2512.520082][T29208] Total swap = 0kB
[ 2512.523844][T29208] 2097051 pages RAM
[ 2512.527642][T29208] 0 pages HighMem/MovableOnly
[ 2512.532305][T29208] 383924 pages reserved
[ 2512.536503][T29208] 0 pages cma reserved
[ 2512.818047][T29208] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 2519.222226][T10118] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2519.274151][ T6488] syz-executor.0 (6488) used greatest stack depth: 22120 bytes left
[ 2519.318381][T10118] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2519.416129][T10118] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2519.544220][T10118] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2520.696564][T10118] device hsr_slave_0 left promiscuous mode
[ 2520.714991][T10118] device hsr_slave_1 left promiscuous mode
[ 2520.735756][T10118] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2520.743384][T10118] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2520.846122][T10118] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2520.853543][T10118] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2520.905694][T10118] device bridge_slave_1 left promiscuous mode
[ 2520.912087][T10118] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2520.985397][T10118] device bridge_slave_0 left promiscuous mode
[ 2520.992181][T10118] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2521.084584][T10118] device veth1_macvtap left promiscuous mode
[ 2521.091341][T10118] device veth0_macvtap left promiscuous mode
[ 2521.564802][T10118] bond3 (unregistering): Released all slaves
[ 2521.627883][T10118] bond2 (unregistering): Released all slaves
[ 2521.674169][T10118] bond1 (unregistering): Released all slaves
[ 2521.999992][T10118] team0 (unregistering): Port device team_slave_1 removed
[ 2522.069294][T10118] team0 (unregistering): Port device team_slave_0 removed
[ 2522.140488][T10118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2522.194864][T10118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2522.493441][T10118] bond0 (unregistering): Released all slaves
[ 2525.080889][T29266] chnl_net:caif_netlink_parms(): no params data found
[ 2525.356787][T29266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2525.364368][T29266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2525.372335][T29266] device bridge_slave_0 entered promiscuous mode
[ 2525.481090][T29266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2525.488648][T29266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2525.497048][T29266] device bridge_slave_1 entered promiscuous mode
[ 2525.581922][T29266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2525.652220][T29266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2525.733518][T29266] team0: Port device team_slave_0 added
[ 2525.764549][T29266] team0: Port device team_slave_1 added
[ 2525.850257][T29266] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2525.857592][T29266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2525.883530][T29266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2525.922200][T29266] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2525.929406][T29266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2525.955790][T29266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2526.096394][T29266] device hsr_slave_0 entered promiscuous mode
[ 2526.114420][T29266] device hsr_slave_1 entered promiscuous mode
[ 2526.611733][T29266] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2526.705572][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 2526.713257][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 2526.735280][T29266] 8021q: adding VLAN 0 to HW filter on device team0
[ 2526.818359][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 2526.827989][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 2526.836463][   T20] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2526.843500][   T20] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2526.851097][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 2526.859646][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 2526.868029][   T20] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2526.875112][   T20] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2526.882740][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 2526.913935][T20487] Bluetooth: hci0: command 0x0409 tx timeout
[ 2526.942411][T29266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 2526.953163][T29266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2527.074690][T29266] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2527.176000][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 2527.184249][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 2527.192860][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 2527.202161][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 2527.210646][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2527.219230][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 2527.227646][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 2527.235928][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 2527.244223][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 2527.252469][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 2527.261423][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2527.268932][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2527.391365][T29266] device veth0_vlan entered promiscuous mode
[ 2527.460880][T29266] device veth1_vlan entered promiscuous mode
[ 2527.553355][T29266] device veth0_macvtap entered promiscuous mode
[ 2527.587070][T29266] device veth1_macvtap entered promiscuous mode
[ 2527.613531][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2527.624154][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2527.634162][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2527.644616][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2527.654447][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2527.664985][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2527.674823][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2527.685272][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2527.695117][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 2527.705564][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2527.716393][T29266] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2527.756064][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 2527.764062][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 2527.771690][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 2527.780232][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 2527.788909][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 2527.797022][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 2527.805327][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 2527.813244][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 2527.821359][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 2527.829968][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 2527.838467][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 2527.847154][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 2527.856172][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 2528.081996][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2528.092877][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2528.102813][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2528.113360][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2528.123223][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2528.133788][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2528.143594][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2528.154107][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2528.164408][T29266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 2528.175076][T29266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2528.185787][T29266] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2528.195106][ T1185] ieee802154 phy0 wpan0: encryption failed: -22
[ 2528.201385][ T1185] ieee802154 phy1 wpan1: encryption failed: -22
[ 2528.219250][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 2528.227054][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 2528.234829][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 2528.242710][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 2528.251199][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 2528.585627][T29093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2528.594070][T29093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2528.611447][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 2528.657884][T10118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2528.666126][T10118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2528.676761][T12394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2528.810617][T29605] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2528.934595][T29605] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:21 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x250}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x9003]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:21 executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00fcaf9568307cc6a0449382e353bbddf5780ec51b18e958b953324a6a032f00ca49785c0000000000000000000000234b0d0ff38d62ca1973c2e1f6fb463a2988a57caef773ab1ef0f3837374aa81818563578ae7c258574e26079b06c4bba1fef861b8d0d11769a4ed2329199c0472e9e23c2eecea273400e078c37f77e9d4ca4d6537945a8e997c7e42c05cbab7df4f4ef42c35"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14b]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10, 0x0, "20d30900000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x0)

17:01:21 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r1 = syz_open_pts(r0, 0x4000000000000002)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)

[ 2528.984178][T12394] Bluetooth: hci0: command 0x041b tx timeout
[ 2529.104857][T29616] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2529.123458][T29617] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:21 executing program 3:
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x400000, 0x0, 0x5, 0x0, 0x0, "20000000000034790400"})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {r0}}, './file0\x00'})
ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0xf7, 0xb96, 0x986c, 0x3, 0x11, "21c90ece4821ee6d"})
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a)
r4 = syz_open_pts(r1, 0x4000000000000002)
dup3(r4, r0, 0x0)
dup2(r4, r2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:21 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="730012efc57a320400"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2529.337810][T29627] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x9402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:21 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x258}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2529.420934][T29636] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2529.442071][T29639] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:21 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, ' \x00\x00\x00\x00\x00\x00\x00 \x00'})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:21 executing program 2:
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20048680}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x8080)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000340)=0x1000, 0x8)

17:01:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x9a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2529.683504][T29654] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2529.720899][T29653] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2529.796161][T29664] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2529.822883][T29653] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2529.857734][T29669] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2529.886358][T29670] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x101, 0x29e, 0x0, 0x0, 0x4, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14, 0x69, 0x2}, 0x14)
ioctl$TCXONC(r3, 0x5411, 0x0)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=<r4=>0x0)
syz_open_procfs(r4, &(0x7f00000000c0)='attr/exec\x00')

17:01:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r4=>r3, 0x9, 0xc2, 0x2})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f00000000c0)=0x5)
syz_open_pts(r4, 0x18100)
r6 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r6, 0x0, 0xffffffffffffffff, 0x3)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8800)
openat$cgroup_ro(r7, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x0, 0x0)
rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)

17:01:22 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x268}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x1, 0x8)

[ 2530.167968][T29684] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2530.197000][T29687] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
r1 = socket$tipc(0x1e, 0x2, 0x0)
writev(r1, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f00000000c0)="4f74aa67dfeef887fd3af1dbc6d9fd37608aa12c352513ea8edc634c0b06", 0x1e}, {&(0x7f0000000140)="6b29677d4a171efaff83a2226a3562c99e33fd7049be76752bf41d68727650b609b6f336b7af1095f447d4a8226647b1fdf0f5bfc369ad8f50b286b5f071c2c48071b5003618ddcd52d0ff0c5480274a00772a0b27316a7e9ac5fe0f599e78d72932d68397f8188d7980fc9818383d6edb75adf20505cb44e816b3360dc7836f25bd70edbe81592f8ab9577968aaf625f8c1f5073b671d57a0a07f873dafc10e1c578a710109debef410ad6acb9c", 0xae}, {&(0x7f0000001280)="835a6b11fe6d25fe8697d9920d94c76ff6c91e48287ceef9720cae2de511d346a1ca5b2d0f7a6aebdcbd7ddf32fe099063a908b8b4f79f19613837826a448f038195db664560be49d72ae26996bfd502993a8e0a4c18d73092f8d988198b4731e0b16b539ed4600da7118f4efca7e4bdea5d51ed5e3be6f64f7cca3d0a14a83e807eb8f2ef31cf73c72174e0498e1cf69e4e61f9ed714463a7510b8b4e72b7ca368b656dfbe2dcc195161b27aa125d12260e46a109ada1fd1e99b58bb42afed909f229dcc29a74634f22c5931f58081b45f83fb93ffb20f147c8ed1bdf5e6472f7a0e3a1d9dbc0b76a10ef08c42aaf5b136860ad777729b8", 0xf8}, {&(0x7f0000001380)="c25476f2210b621c5a3ffe587c16e130eae30d057b670f72d3048dccaf89fc7192a594c6981c82fddefa78a43ad47a85255ed19f8491c8cdf6c69dd5859bcd00e5394e6dba25109857058700599f04a83d306e961b6130a8f3ea01434efcbf01a735181032f702d77dbc8bfaac353f4dbe3e401ec6ee", 0x76}, {&(0x7f0000001400)="8abd81241c4b79e0a915af5340931a8b5fd6fcbbd35cd2e65b5a8853a55f6cb07aed6bc04f8efb7118a919be23d37375e37b4da8afb357a7f4fddde132b3d57c8cf6e25f64b881518974b19110965805", 0x50}], 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x100}}, './file0\x00'})
r4 = syz_open_pts(r3, 0x220000)
r5 = getpid()
sched_setscheduler(r5, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000011940)={0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0xfff}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x5, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xd6c2, {0x0, 0x2, 0x6, 0x2, 0x5, 0xfffffc00, {0x5, 0x7, 0x3, 0x1f, 0x2, 0xfffffffffffffff8, 0xffffffff, 0x1400, 0x0, 0x0, 0x8, r7, r8, 0x7, 0xfffffffd}}}, &(0x7f0000000700)=ANY=[], &(0x7f0000011780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x0, &(0x7f0000011900)={0x20, 0xffffffffffffffda, 0x5, {0x4, 0x0, 0x9c0, 0x3}}})
fchown(r6, 0xee01, r8)
setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={r5, 0xffffffffffffffff, r8}, 0xc)
dup3(r4, r0, 0x0)
syz_open_pts(r4, 0x20000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0xfff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
syz_open_pts(r2, 0x4000000000000002)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(0xffffffffffffffff, 0x5411, 0x0)

17:01:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:22 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x28a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x8, 0xaa, &(0x7f0000000180)=""/170, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x6)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

17:01:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xc601]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2530.572034][T29721] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
sendto(r2, &(0x7f0000000040), 0x0, 0x40010, &(0x7f0000000080)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x80)

17:01:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x0)
ioctl$VT_DISALLOCATE(r3, 0x5608)

17:01:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r7, @ANYBLOB="050088000600cf9afb060000000004000000cf00"], 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100dfffffff158b00005200000008000300", @ANYRES32=r11, @ANYBLOB="050088000000000006004800000000000500890000000000"], 0x34}}, 0x0)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="006262396404150dfe00001200000000000078cd5ec346595706a5d7d4ab0f32fbad83dd20203daa6f", @ANYRES32=r11, @ANYBLOB="0c00430002000000cf2b00000600ab00ff030000100013009b96182484019bc816b68c040800a400030000003000be00be3bc7110db6788bcd7e22627fb0b12dd0b8241e28fe5b83f221521b127166d6234dfc18fe5fddc471cd17b6"], 0x78}, 0x1, 0x0, 0x0, 0x400c004}, 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xca01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:23 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x290}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:23 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='rxrpc_rx_icmp\x00'}, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2530.971135][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2530.990524][T29753] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0xed00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2531.055644][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2531.064208][T29244] Bluetooth: hci0: command 0x040f tx timeout
17:01:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_open_pts(r2, 0x0)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0xf1, 0xaa, 0x50e})

17:01:23 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:23 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x294}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:23 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000080)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2531.370581][T29782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2531.422986][T29790] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:23 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x20000000) (fail_nth: 1)

17:01:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:23 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000140)='afs\x00', 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xen_mmu_set_pte_at\x00', r0}, 0x10)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%\xb81\xfc', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000000180)='%\xb81\xfc', 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

17:01:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x8}}, './file0\x00'})
ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000000c0)=0x4)
dup3(r2, r0, 0x0)
r4 = dup(r0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000200)={'veth1_macvtap\x00'})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
setsockopt$inet_dccp_buf(r3, 0x21, 0xc, &(0x7f0000000480)="62900c759122fa202369afacca36284804d21b5f6ed62325abd66b9934712ce9679760af72b99c0df1537e0840faf5d2a4be86602b81fa9df42dccbd1044b09abb86bede80c8101fd05d3a0b1fefaba8544b45b3aa2afbd32c7a1a816a42c9a92ae1d498", 0x64)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="1f6eceb1632f3fb6170faa4e0942db57d175bf2927ce19de98244d7c612d78bfa612bb60264ba111bd022de14755ce6ba17a6605d9b3bc65544344065327f475d250f0f9698746e22de35cf6905e47bbb8272de26642b92810dcecc05b7730b3a06cfb5e754cc51dc783e7568d6f8cbe501abd948a8e5dad5199e8d28e242f9f54d8ec51ead948898a46f0a9d7e32805e0ff64a2578f5b543c8103b3dab1a05a41b3ec99210fbcbe708bbe06664194cab93c57d5db91da8971488e605786ab59155e908421a8fc3b7b512a469f57f9d750482f1a4f1150c47382c09c4edc225d560229718b0a4f738a168b97616b99e76eaa97ce3faeeda7542fbaec7133724fd4dbff2cb9e1e8ac0a7e13c671ecf15298027b4da96084ec8316259630d47c73bd15af6373143133ff47d820d7f59412083b4a078fd4f2a88d256014ee86fdafc1f8fcf435fbe2d1f8e54526390fe6179f61e7c365ce184484d17b79869dea8b0d0c34ca5675c23d159fc030262b59a60f1f71d9f755c2654939614935fce8add75763ff79f6d47a3f8b8250feb7881ee294e9779dea19dbed10ed455b2f7045b012b9d6801a9e0b29da34ab38a5de4790401b128ba29209daf5a0ee54f372017e40d299252f16ab76b35ffc580a4f2969fa28873fda1ae4210e085cdb6fb6df6c405cf4650eb5f8fee55b38da4ba76dc3104a9c23b88c4eccbc810c0247d8dd4869b0206e2de4a0a9c4883b2fce0d886d5ac0ed4068d42a644e9979eac14b8745088ed34cbda61c13b1d9c8e2d1be5b43948148c9dc6de598a75440c9535648da952fc456c7e49bf5a143e5d55b71cf4c08963ab61951b7bb30d5055d062406866d124bf2a5842f532f2084bc62f5bc00cd355b9970545b61631c225d9feaffb8ca80982598668067761ba89f036889273d5c3cb2365c28bd8492d577f32c5b6fd28e53ffe3cc47be49067ea3a3ea286cdef420193943afe7169a8f2269587eb38b9e905e50c05a8dc24c2d5de1b2c31b3cd45d2782dc68455f86ee2087aaa402564c13618763a42a11b7df40047596ded0e2b484c063f27a029936e97aa5e920afaa6cace076fcd98ac2e74e9611921aa03e8cb249b755e93725dfc1db2823e7fedee1953ca34f7b8e9439d1e3989bcf7422dee59c82199ed44e28a4042e145e6d060c53184ff7fb243eb5ab623ac4f272646f73436f38cbaf8eb51847ab45aa4c35501c9ec55c35cff647f24e59bc0802bbbbab7791084579c6515939d5b2d1b031a96fcaa454a33a84f417f2b1f33b02d10f6d1741f3a6c88b092e9cb22982233292389407540d02aacce55e0acbbc5796f321172851193ac38d1c8e2ef834a0a84b96dc77594fa846c1ba7c0f689e256596e621b50993ee0b812a468e891a7f3b4d53fcfc1cf3c7b085a5a9a68d39ebcee9fd7a6251b51857130fb04925a898a762ce22cc8dccaeadd1dbc7c136293cc1350e3fea51f2797917dbc19790d2ed3964bcc8f42e0948347dea1105911d10851dbcb021c45e84eb6fa987c305dc2c6988ed9a9581fff90d28734c72f124a80a29c5df661bb47c3140fd8440822da392d39c58e319fd53eabd8326d018a06b3976b8f0c92aaacf49e0093dd59ec497d607795293a5ba1f41a8221794194653f8fa85dcaf3dfbf77a4d476d3a8b896bc728d752b23695e9ad6064a06bff32195ee8ab8a4cc385e30808d209649039cea28999a5477b8139bf7fef114b2ec669fc42bbeb37d9bc6ccaa460a57cc7321ebe8a2e4ca11d7fae97aa8492d0b5c777bced83b025b9a0869d2878d2041660c73ecdcdcac1219abc96fbb6fad9b5049db9c19c12d2b3a3673ed03a344675c2c7cc2086ce9978143ea7d7f98d84b3cca64a61e69831398d8f37540595b507e86923e6a420554bd616632c741e1ea1d6bee0ed48508d10839830f6a3193693a1cf14b60a3cdc3fa677647fd70e165a236c30441d53adcc512233ac98ab49b7167f4dcfb25b4044b93f091bc4a2d8a513e775bba4fc6b317a0847e6ad512bf3864c604c12d4d4ab613aad25af82312dfdedda3a6b478a7ee5239fc6a80fe5164b67697a8770e682937c2bfa562bc56d92f48a4e012aae8df5478b18b8c5c31cdef7136c0c603fda144060e1971198b8ca042e2ca16f4048e50bb8c54737bc52d9fa09f4828b0532bc4b528286829ec16df7bb60e5f51cda5b5e49b289e4f20d56ade8509d146b215bea29f94d4a9ce49b275db3423bd72d6720bfd21d87179e3308f49e5ee2b424013e15ddfdac22eff3b653216107710b632e2972dcbd44c63a7e21af1014dd59bf316a0bbe654f5fcf630423f5f48dcfb91f8f3f416e9fe8485dd0ec0d1181b71585a01ebd9d3d66c79c9d097fd3209ec8a4aeb2a287a7b5d17c6f62553a7e6b2b8731ba331f42509b9176252c79f08828937aaaa9f0055ed090c177924e6188d2d0e122ec7828868184dd216b509a9152dd5d34372cc98a0469fc03a095d068ac36efae2f4dde0a70d7f29849bb9d3bd28e8ea84ed29d2223912c067e54a6d631936c1d66b236ee6b37e2b47fce4f8b16c453248beb13d7900f8054062d719d141bde38c4d413b87752efa43bd5ee288d258e899fc912cf0359b18cffe45857dbfecb4464ed3dde15eff6784e839c54ab9e668daf02c282b7318420eb23280cc7fa29df6cb5724864f33fbec1e2c881c1fd02a53f04da12279c848af28f6ca20d61f788cdc5226c8f92beb6843e4b0f474ddaa5b373a526d0ea83422ad51ff7b42cd022d1c1297d73b26ab8b3e24a01045b7ed5d369b2e41faf47816108b997008c1251b9c04a28ca00d5deca401bb2aa067c79ce35303e05cf53907dab9553d05bf821d610d1dd717a24a0000cc64a71f31d9cff5b406557d024056d1e66ff7580b43d2a80ff9b0ffecc984d09d28cf9d059142c4cc98156d4b26a256551e30742bfaa505159a6cc1a5e817fb4ba66e4a03396fd88f1f2b08abffb047bb00269ee07259b3881dcd4328553fc3f2c3e6294c4127b203f17d81fe4780454b559a0fd20ed104dc3307973926a1507fd846a10adb2c45fc3c9f64d44ddd32d04236beaf74fefdce9753a854fc6c6cabcd3c2cd331410e464557484311c9939634d4d5c2ad852d66298dc240ce4499be08325dd9fade0168764fb95617acc913c09336e673c3a23c9814724d33d75efd772b78fcc53c058a993859bece2f04cf830384a243a170b9cf7dba2d9d3649d495ef87f0e9ba97dc6a259e0dd7ada7e77f2d1a3ae51bc42abdcf6cef6507e5da68f92ef2b5e2d2fdfcf2bd1755fe6af91a55cdbf3458d55d24b0634f51dbbc0f7a3c06476f7d71adb5e0fc91efe164f1d679dd44e63e4dc9261caa32308b7a2b68290f79655f7385aa56e003804a7a2165ed1ceb12ac5b10faa4ebbd4634753dfcc1ef322acd824255440fac7989886a5129f48497287d7183a1ce5f17fb2c1559249f974961901abedcfeb124eaa1f2198d28d1297014dc37a456afd7f9f368e0eebb4eadada15581ac96144f70772a7a87e4ebd0c62535fec583a53235d9512fe073613a6411535f11ecbaec5cce291e5d4ae179919e2c43925445271213c5c3f7e12f0d8adbc316de25ee503a98495fd8ac9a2e05cd2fb3955c498905c25807b4e4f7881bb6e26cb8c3e4f585937f5a71ba541e51e7858aad001b040a002613cabd954c17bbd94d81a59c572c85014c7ffb8864d08a8f74dd833691e0bdd9a8e5bba714dbe2542ea32eea890261ea12b034535c1d6f6d36aa33b98860d7a2f0f2f2be3de768e33657f0126f9c99837e70edd9e72fe32caf26e9e7c474c52ec8ab2d3df47fa79c9c8c5dbe1f6fa62c3bf81501f0fce9ade7f1f553f0e8ed75d842c969f8db841649c9929e301d4558f2e0c0ca1fa289e45d28d5bcc5aff05f612b92b01816b261c55399c17265162b97ee9ff8503822b8a6f766d92758f89b653b307c2277d7d3839bd5761ebaa8489aa9ba8eb43ae10540e91ef432e9f8a07badb297682f6e437f6cfb63f6521992fb3eab58cb3a484f06def5f7cc54731aaac36e8f9013dc70cde45bce3a08c98339a87cf136ccd17b56f7af32d2a1012ae0c460e532fcbce4b512db6ad449d82d06c32090c2d8f6a0139b8293f26eecdad341b2ea363f1b5c6ff3b189b7f359f1f8bea2271703348d9399a741fe2b9c03bf74b85d5758cda90dabb8d9c939769ba8a5e0036c4248ddb936be8e49898b0e554b617a61647293f4c805859e6b1a4352f53ddc0643fc8ecb3586d8d2b55b322ad222eb87a1f4df285cc55f464e0a518965b029e88598360383a2a1bcae8a6f502785d969e052d18595b89bc3c94b12188e1c59fc47541f77da4bad601213893755e8683c558062a1e70d5e74ba1463285099836d9d555d08f3123da9dfa349836e9fe5ccec8da760e399e2448a7d9177e5a4e8112e402003222972d05dde9d8b1ad77a7c029fe8498ce60f7d6aea51039d6e8eeb002c608a015c5470a691dfe1fbbab8ac79bb5358d770781985ee374c9d95d13c1dc495f9600eb583c8197dbca643fe4ec2ec720f4935fe7e732cd883bafd2d2dd1d8427690d25aca77131f81545cf4df5e966770d8214790bb63adce89aebd97c0d1b93e28819df6761e1b4645b37bc37f3732e6bb57f6656c48c9a318bc0a1b7ace9406123499c40b7cd2fca693a4a9801224c26141b21152dac657652976c6439e3ad37af9a984b14f2364d1e80535806dadd91a788bcab57b1679f81ff81ab649dd9b77a3c2fe6509859ebb10a1aa1fff2aa092b484a2bffb3b281366f01def9534aed7ccb13b4d25e2dca861d76ff901c3cbe898483d88a6693745998ba55d17d0d1687118f9660b660eb634d6be49439bcd757552b68a498d1e9d4485e2f4c8c2325ecf3cdc9c90990abb1d25e5189e827a552e48ce5d4b431629a78acb104e4379be8c089f8fae1dacf4903019eac69d5541fbb69492a419d2a1e51fddd5feba02f36c13b68d9636ef8173d4eca31d31acffb23981406806c9f87cca7ef80cdacc8e0d46120170084e6b660362d913cc3fbeec0dc34aa71578dcb9fff6f25ddb6b80ff9b4b9c612011c8ef8aeb48e79302d9008814af04922892bdfe59320f28e36ff34b3125f795e89cd3a79a0f95723a60c6ea0108c682eb4ee50937325602ae534461332d2f5b62bdecc0e060c11ada5763808a865f3e60e9025e2eb408899e0796085a4111ddcf1fadc5e125cfb9c7dec6e5c30dd933c69849926403a65c9edfa31f2259d3ccfbbe730162709c29a5cc4113c75a3e188ebf933e54354891a4a3c80e969cead66dfda4238d5b0897c05fcdf97389d0a1bb0b737b40464b40aeb1a66c6d366296159d5a918999395781737b85a9a4b4e2d47552aff2a13916a1bba535f1aace24bd1df6bb9d6b7a1c13f28c7bc94eda03b34b8893e54b2b8a6d1209a684d65a2869c5d1994e8d69ceb39cd88056af3a3fb9b076775bbcf215cb8466f70e22ba5ae7dc0e717d9064e5e43b5668b789ffaaaea4a6ef1258939b847efa9af57debb3398ef38e8959672863f01555c40de386b08c24b3148eaba495c3f0e831c9a9b41058fe37de8c61e194068360bdd5678bc5df17b88c2b036b316ba1c55adc8367eee739f3b2632e56ef436455df2d950be052ae90f0f7b53af1627d7c50ed3d0ab0e086f32765f9047a3cfbf5873d06121bf7795980a53bd9f04178b76f8eefef67ffd221c483e218c614045cf6a6b371335a234d96425b6bb650b048124a3dcf9de1ab47c88133b36bcff473834cfde44e6498b1dbdbaef3da900b2c0b676c76f8437ba27eabd870dc58d8ae3938f03cca5ee5af6f4d376cc21fb08f0dece629c13d85631a78feaf057dbdf8477639744364968d797a6b2173e171686a37823e0614a809c82624d35a707cbdd59c93649fe37eea80e724d2b9538b50f2353e054f90170ffbfc11ae7d965c1587366bc256de575769ddb555418741c486a57b4028a976a1c811ad3dcc0855a2ce116f7eb6c3e061261875dcba33a4a772fe78f7b9cd239ef1c2128f9254f2f7f2b02b9df3c34eb5b73fef970c10355646991ac531c9cd5a8f505ef3b8b7274bb538b2a677a18246357ad070e8793326b6da73bf2fa66b95be326c0137f76487924052cc7f21100f8d0112d86733de9b006e135bd1f288261cd4637f4398997ea5ec1917826bcecbf8b9fc773272c535d4abdf05da14f06f4898a4c8e03da55a23c2dfba9f13ed7814538f906abab3bfa3059af6924a1033f8e3867f23f06d3aa7443b45799ea88d44e3b081f5641701943fb4fd3a717ccd77eaa5d86f81e3e2003c64f7b5c61762ccfe01ed22e48d6a383181539e654fc4f7dec3998097e0094e764019f4cf98990a5bbd21acc6934b20b9d4a8fdaa5269ba9d30e9dccf9968a566753983de70381dad66a853933d34c1ac743bf6f1fb1d421921839d9f70f32bae24e0944972598582bb906f5a7c822848a0918da19544b963c1cfb45ccf02544bd65411de376c9d637d6d73a573c564cf5b13ad0624476576059d15532965c816803f534b4c18db48be63c0cc4008fd95cb7107649d835feac2b29b36dfcbec881d02600d5286b193f45b19a075c79461926dac4a6ba5f94816eb605f2e36fc90e9e95b3b0bfc0fa7d7511f2f2c68a203cb2388f53117392d648ceace02504a847c7f5c1020ec1aaf4767f81010f1cef65626254b2931ebcbad176ae0ecd4d071b5d4b834e2b93f5300377b02005a30d0b4562e9cd960cf3f3f0792298478d7b41e648c7c84d340ef6ffa4d68209b9de36bc4d99aee7c243f4be44ebfa8c47b2d6ecb0a4e5964fb076e631aef53f79896fe5d9a1aeb3a6b22c08798b50d4a9387b757657e12cb5d2f407c0368f44200dd438021356d393eaff30fb266ad7685906d5ed6ebbbdb77450d11ad4aa9700ee2dbb1f920a5cb692a3c771ae807f531b04c332299aad2fe205bbb3bce6d969650474cb8cb9310b92da52c528e280807e72e019ebc49e8a71c207e2f4eea3ea51ffcbbdbe36118c073272af9b8adc244bb2b4d9f47b139d12594970faff3d6fc299a46944c7f6974bf7827959d7a34b49eb0f54a02b34d856b5c07c21e908fda7b68482ed868ebacc5d22427e84cb79e6c162de4d72a2e548fb1246bb93b18a89cb148d60949fcbdf6b7df8c214a30d802db218ae10dbb6a361c6ed8dc19e0f60c710d305a034143be90ff0b0af8a27de8b0e32d22b3f59618547d4e3c002df46820b501c7d7dd689e091d4bacd199b88606c76e916d7ad6a5585692ffab6f12f9cc5440d2090df498d8aaa11e3dc51e23c37ffb7b7a3b5e24caabd1976a204de241d9e4c7ee5436cff01007fad0b1e26cb4591af0382074268b18d1c6539cd762fadb07c2f3af6ebcb935c148a4b245255f500717fc3c618ed6e7e739b1ab68002c32a23cdb0114a3d82fddef7be06f192bfa43e6d320fd791a91c81b550ea6470c5d3fb5a8bc95ac56cc66f0559d20c454c3732ac478838426e1534440eebb598faf1325fe534bb91cabe26e0985ad150c0d58f6e554ac056eafff9d1319272e38f06cb412f977075d775fb5a0fa52abd129321313429443e61bf11b552983223edf8ff6838324d51ff696c2a4e7d212dcbd3186ab28bcc89846857c387f7d144ad0625d0d91aa228997064bb4169c81c4d6a2aa46f405530be38a0515d66c1c715d9ae6b5e56e1eac5350ded20db80549b74807833b83773c03890c4ce18f25ecd58e883966c077263d8f8f4cd92d34b1d1c6c39e7af46bce56807ab8a3a520e74880acd365669df5e1cfff3ef35ba4434edc5d0fc931706f13fe3b760240a655e4c5e7078c4e92a56d2ff0236cf5c458ab19899e5fc8b61a760b512efabd1d8020b6e44394ebaabf10a9f1169599e6a71ee6d45fcf78e0501c5be63505af376ba059d8505a14243d044d69d1d7b7d82372f31ff1a854d30f1f85f0357b65caf40001aafec00876681df44dc2e385994023b6aa14d802e5f98bafd1eb4d74836ba2b67b83692f74a81477cfad00725845d5b1700877d7c6916263203cba130d8ef520a5eb8ab2a65206ee72b783cf1cff9e805eec5bfdb28bfa9f610cd675e8ba4b7f2fd4ebd99c9487a05a95f56795fd5b76fbf3000c18cdc92d2aee5fd2e99902a3cfd18303cd167f74ce3fd6d778a0d2b3fae8218a2139d7793a2f7cd5ad7e2806baa146893190770ecefd586ef4ff60d4fe078ba2d9bb8733738cfadff0af606e1d38fd1c71fbebcea01374200c7d8748a310a513b282a64a5bac7ea5b619495bc1d5747351102e0bc7c6941ecb31bf872d095dd33eb6051fa278782ec4356328abdc8744bbaf761feb9d563fba8e772ac61382442f57cb62452c7e4d15486349a50d60911f81ebe9b95788628090c4a9abd03f6e8e24a7a19ad8d43ebb48a289d4698f7f253de118041a8f65f436c11833e88fce98c2532243ac3ab60dfc7f9513d201211db922cd3458def942a5ebd21a4891b461e319f3e8da1319b2666fa8848dad2295bfd414e1317ae197c03baceac3d6e61fb0a0748aa49be358c63bc969d0464026849aa65b47e7721f54b63f99f634cdc53519735bb08c8e5bda8de90e64d7f2d9073b06705caa3f81c266340c883d68dad87c568753b8a51754fe341c08774319945295795ef822e904f5965b8b16e4d2750e5971ca074a64aff7968eb957f0789be5f5330f7e3c876f4eecc70ba54d6f31aac73ee65a73cfeb355b7e6aff2cf33001cc78dab664e4342f37a9748640e13bddd22ebef6cfde20fa9d0a05f4639b826211737290bc522e4bb27b8cce628e34c3d14d8f705a69f4386c16f3f0f636b6b690e53731d40621a329b9fbd4f72a995904a881dd6254f56c67657368066c765ae9a0f95c7b5f8827dfa0fc6563c3f812f441ab5488608ce0e19875868d4826af233c1e63a8e2e7568aa5b5de08cc11140ba321bdc03c6ac3d60485cfc1524ce574194128127ba74179ec1e70f0c0a23455f4d02f93c8947636059f9c0a7f5a5d4a965e2b2145fa18f91c4d82987ce11d8cc4f63495a1111ba047921448854973dd56da290c39d584f5ae0a6c21bbffcf59723ddf6edbe7dd6c25c42827395af05adab30666f14723e87c137ea1bf998a6d68f7807c8e3d8fe11d1df7e7510f3795a8b2cdc1f18db8279667d92319a0a20489eb9154e1c556f79f02d17a01f444af7ea3cf3ad8d12f0e8f9948205df2190bbd6374571c796b48271a8cf4891673125c30f46e0319af083794d1f62b0427f5c2852807b3f2120c49306b8aa1a500270ed10148bf319524da18342f4f9b48e2cf66d461a5628c6a5cb6e6ebb1fede4854822b0076283cee2ea63a31a47c40de5e2c6ada88db4fc607994116a094b725976fb1c75404316109ec75bbbb2fcee7ef324173f771b382d9628db92d179768d4ac7853fa5740a5967c5fe98daebcdf8dd35884d6c7ce836a760d3528e6f64fb62c6d6131421be9e4533d02ffb5b177ae83582dbbef8b4ff0e3569846023f03bc612a698173d3eb7c3402da5c6f68b96fbffd3271f92446d0fe6841beff95e513f82818c430b21e03344030abacbb8385c9278f261e3c9d697eb64b505fbe91e673c8688b4ba114ccad5b6e2066e891c152f0c29f0da6a90e3bf87d889d159b6853318a260fb48d890792f9cf65865da68f2b6b3cf79dac28cb0e7ad6063c2e19f14ada83489c365631ae01851af386da31f47ff5d28f925196aca6a80f55f1c7aa97ba62b0baf0c27cfd050ec38908c0ebf8224444e5d9d68069bdd25a42fb0652eb346b4e0c5948a76b59da31134a9a827ca4bece3d552b664db2367312c610a5f5d42c2841ba91db66cde76d4cfb1fd5b03605b7781179805dac5d5cf047d5c9b49e17c4e8a79d838bd389539ef3f9e106cb8a9d141b7d907c8813d03ccf9388bc3707f6eec2513d1014418e590812f3670400919cd7d22b5b798bac0796469c2018d64a06a8a0e82075e4eabd279966f046961b3cce22b494ac7d67fc91549f24f25057254d10d75f121e2aa1af8709a8235f8cf743805a8194fe1404f50165ca044c6bf62d4560eb6c7cff01e9819e586743fe90b340e3262718082d5fb7ce90078994dac737339cd7aadff51876ffa25bbc74bcf4213df79eaa1eea97d9c234b753e979cfe21aafa9591b3d0261dab48096e7a869002f931d58b88977ccb582e2dcebac6bfb6597e23e774160f27b807ebf6bfe5943e2e20752ae82e46ac1ad143a4718820def3c18dc1c34ef8a274dac1fcb47b20a1b3ca8eb10cc63a06234f122cb32ba97dd7a0a26d0afca92fc0d930ed68a59386e72490b47ce1f348064a8461c7b813b0f2e5b3f4d23a6199eb9ec085199f79c0780667813ee7998b3d071ca6a06b8f2358ee10be6216c4151c196eb849df64b79291e11b41fb5a7af226c64019afa87d09b3d41b9979ace28f4e01278f96f9c0bbc4bbc3b80f86d49f6e3b2f5035d609c51568e0099eea2b8812f05304dd8f33fb11574c06b5d6bb889d85b6102360bb427b704307c9116f53d71aef195928af08585bf85395703acb547d9231e0e9abe2118384c3f53a9c13588b56c8dfdf2a80c4fe18469191b9a35f32f6a6cb0c640e7f0daeba743c052e3e1692010ef0267ad1e631f173b32755ba8ea2c248059757516ea0e5b66f61d16f3bf60206e10d59fa08d49a6b07098c039cb40812c24af2c59b64832edf4e4b66a5fce3df51188bb7ba83f94f97fce3cc1a0e109277b17db09ba0717e85a9f7f5b0eee8574497ebda2b148a5b4e50d98d99dda46ff335b8d6aac7acc32b91ea3230df0d97d25d34a26e9494fee26ee41cb3a1921aa47bc71913679531a5f5d908cfeefc33611f548cebe8aa1fe8dc7aae1762a8d5eb05251df40167ff26713dbd95552b492909d5925cb19257e06e10979dda51edb03765cf274b17ecae55c13f94669e66ee1c0e54910559bf71249c8bf1d8023c5318f7fb71fe6ace008cdf5e267ec5e8deebdef921fb5738115f50a47dad2eff2f9b2110629a0218905f6f5f290928524bffc92cdcf6386281c78fff3df6bcc1bc3b8c7ce27debaa93bf1178fa5b999c50f16a68f08392c9daf9208f0a168403be45da18797dd1f1f10bd7a5c9cf8930342b7c0c62a767ab85a9f90a22641992d51c388e483510348b0f2a097a018238f5da5a488b26a89f0b31db6f93f8982147c443e89640cff697ce0da4a1cd410bdb1d812e9a514e2ebde2fcf6af6f5a8c56ba0e654a4dfe6f3504f6e96661420c8c7d96073835fdc179189704fdaf05d3c632bca9adf62a3f3a6fbc12bf2c714bad6bfc2192df5b9dc14dc3fc6fe59c7570b33176359ba344eafa368ddff5b692704f2a4f4878b44189892a651437a226a421674e3c28c569a864366b93970657af38f37c08b62f72535bb3ecf25aea12fe2e104cb1a0eb73ff94201a5506d69cec3dff8b95290e7c64361e446ea027a6015e717716aaf8cfcf093736210b25752a3816c0496af1851847c665478b178fc78c7ceaad485ed60c56183500246afb9f2e164062e3a1183d", 0x2000, &(0x7f0000011940)={0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0xfff}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x5, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xd6c2, {0x0, 0x2, 0x6, 0x2, 0x5, 0xfffffc00, {0x5, 0x7, 0x3, 0x1f, 0x2, 0xfffffffffffffff8, 0xffffffff, 0x1400, 0x0, 0x0, 0x8, r7, r8, 0x8007, 0xfffffffd}}}, &(0x7f0000000700)=ANY=[], &(0x7f0000011780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x0, &(0x7f0000011900)={0x20, 0xffffffffffffffda, 0x5, {0x4, 0x0, 0x9c0, 0x3}}})
fchown(r6, 0xee01, r8)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x802000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@mmap}, {@fscache}, {@access_user}, {@dfltgid={'dfltgid', 0x3d, r8}}, {@access_client}, {@noextend}, {@noextend}, {@msize={'msize', 0x3d, 0x8}}, {@cache_mmap}], [{@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}]}})
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:23 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x29a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:23 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28d]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2531.824230][T29801] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2531.923509][T29807] kAFS: No cell specified
[ 2531.980934][T29815] kAFS: No cell specified
17:01:24 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2532.036333][T29820] FAULT_INJECTION: forcing a failure.
[ 2532.036333][T29820] name failslab, interval 1, probability 0, space 0, times 0
[ 2532.049612][T29820] CPU: 1 PID: 29820 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
[ 2532.058038][T29820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2532.068097][T29820] Call Trace:
[ 2532.071374][T29820]  <TASK>
[ 2532.074309][T29820]  dump_stack_lvl+0xcd/0x134
[ 2532.078915][T29820]  should_fail.cold+0x5/0xa
[ 2532.083431][T29820]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 2532.089153][T29820]  should_failslab+0x5/0x10
[ 2532.093662][T29820]  __kmalloc+0x72/0x340
[ 2532.097829][T29820]  tomoyo_realpath_from_path+0xc3/0x620
[ 2532.103381][T29820]  ? tomoyo_profile+0x42/0x50
[ 2532.108073][T29820]  tomoyo_path_number_perm+0x1d5/0x590
[ 2532.113539][T29820]  ? tomoyo_path_number_perm+0x18d/0x590
[ 2532.119181][T29820]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 2532.125002][T29820]  ? check_path.constprop.0+0x50/0x50
[ 2532.130396][T29820]  ? lock_downgrade+0x6e0/0x6e0
[ 2532.135401][T29820]  ? __fget_files+0x23d/0x3e0
[ 2532.140108][T29820]  security_file_ioctl+0x50/0xb0
[ 2532.145075][T29820]  __x64_sys_ioctl+0xb3/0x200
[ 2532.149774][T29820]  do_syscall_64+0x35/0xb0
[ 2532.154227][T29820]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2532.160141][T29820] RIP: 0033:0x7fd2b87e0ae9
[ 2532.164561][T29820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
17:01:24 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4})
write$P9_RATTACH(r0, 0x0, 0x0)
r5 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5)
ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000140)={0x3, 0x7, 0x12b, 0x0, 0x5, 0x100000000})

[ 2532.184182][T29820] RSP: 002b:00007fd2b5d35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2532.192607][T29820] RAX: ffffffffffffffda RBX: 00007fd2b88f4020 RCX: 00007fd2b87e0ae9
[ 2532.200584][T29820] RDX: 0000000020000000 RSI: 0000000000005411 RDI: 0000000000000003
[ 2532.208568][T29820] RBP: 00007fd2b5d351d0 R08: 0000000000000000 R09: 0000000000000000
17:01:24 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x300}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:24 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2532.217751][T29820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
17:01:24 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2532.217773][T29820] R13: 00007ffcc345574f R14: 00007fd2b5d35300 R15: 0000000000022000
[ 2532.217807][T29820]  </TASK>
[ 2532.218738][T29820] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2532.443281][T29826] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 2532.460084][T29826] CPU: 0 PID: 29826 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2532.468509][T29826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2532.478570][T29826] Call Trace:
[ 2532.481849][T29826]  <TASK>
[ 2532.484777][T29826]  dump_stack_lvl+0xcd/0x134
[ 2532.489387][T29826]  warn_alloc.cold+0x87/0x17a
[ 2532.494076][T29826]  ? zone_watermark_ok_safe+0x290/0x290
[ 2532.499637][T29826]  ? __kmalloc_node+0x62/0x390
[ 2532.504415][T29826]  ? io_schedule_timeout+0x180/0x180
[ 2532.509718][T29826]  ? __vmalloc_node_range+0x574/0xab0
[ 2532.515101][T29826]  __vmalloc_node_range+0x883/0xab0
[ 2532.520318][T29826]  ? vfree_atomic+0xe0/0xe0
[ 2532.524828][T29826]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 2532.530642][T29826]  ? __ldsem_down_read_nested+0x850/0x850
[ 2532.536374][T29826]  ? __wake_up_common+0x650/0x650
[ 2532.541409][T29826]  ? n_tty_open+0x16/0x170
[ 2532.545835][T29826]  vzalloc+0x67/0x80
[ 2532.549739][T29826]  ? n_tty_open+0x16/0x170
[ 2532.554158][T29826]  n_tty_open+0x16/0x170
[ 2532.558406][T29826]  ? n_tty_set_termios+0x1010/0x1010
[ 2532.563692][T29826]  tty_ldisc_open+0x9b/0x110
[ 2532.568286][T29826]  tty_ldisc_setup+0x43/0x100
[ 2532.572961][T29826]  tty_init_dev.part.0+0x1f4/0x610
[ 2532.578069][T29826]  ? pty_unix98_compat_ioctl+0x50/0x50
[ 2532.583606][T29826]  tty_init_dev+0x5b/0x80
[ 2532.587933][T29826]  ptmx_open+0x112/0x360
[ 2532.592170][T29826]  ? pty_unix98_compat_ioctl+0x50/0x50
[ 2532.597620][T29826]  chrdev_open+0x266/0x770
[ 2532.602030][T29826]  ? cdev_device_add+0x210/0x210
[ 2532.606961][T29826]  ? fsnotify_perm.part.0+0x22d/0x620
[ 2532.612328][T29826]  do_dentry_open+0x4c8/0x1250
[ 2532.617083][T29826]  ? cdev_device_add+0x210/0x210
[ 2532.622103][T29826]  path_openat+0x1cad/0x2750
[ 2532.626691][T29826]  ? path_lookupat+0x860/0x860
[ 2532.631440][T29826]  ? perf_trace_lock+0xeb/0x4d0
[ 2532.636283][T29826]  ? check_path.constprop.0+0x50/0x50
[ 2532.641830][T29826]  do_filp_open+0x1aa/0x400
[ 2532.646324][T29826]  ? may_open_dev+0xf0/0xf0
[ 2532.650838][T29826]  ? rwlock_bug.part.0+0x90/0x90
[ 2532.655767][T29826]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[ 2532.662006][T29826]  ? _find_next_bit+0x1e3/0x260
[ 2532.666852][T29826]  ? _raw_spin_unlock+0x24/0x40
[ 2532.671697][T29826]  ? alloc_fd+0x2f0/0x670
[ 2532.676025][T29826]  do_sys_openat2+0x16d/0x4d0
[ 2532.680699][T29826]  ? build_open_flags+0x6f0/0x6f0
[ 2532.685717][T29826]  ? __context_tracking_exit+0xb8/0xe0
[ 2532.691166][T29826]  ? lock_downgrade+0x6e0/0x6e0
[ 2532.696012][T29826]  __x64_sys_openat+0x13f/0x1f0
[ 2532.700854][T29826]  ? __ia32_sys_open+0x1c0/0x1c0
[ 2532.705786][T29826]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2532.711679][T29826]  do_syscall_64+0x35/0xb0
[ 2532.716086][T29826]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2532.721970][T29826] RIP: 0033:0x7f6ba5a61ae9
[ 2532.726377][T29826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2532.745974][T29826] RSP: 002b:00007f6ba2fd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 2532.754373][T29826] RAX: ffffffffffffffda RBX: 00007f6ba5b74f60 RCX: 00007f6ba5a61ae9
[ 2532.762328][T29826] RDX: 0000000000000000 RSI: 0000000020000040 RDI: ffffffffffffff9c
[ 2532.770284][T29826] RBP: 00007f6ba5abbf25 R08: 0000000000000000 R09: 0000000000000000
[ 2532.778238][T29826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2532.786192][T29826] R13: 00007fff22a76ecf R14: 00007f6ba2fd7300 R15: 0000000000022000
[ 2532.794163][T29826]  </TASK>
[ 2532.797352][T29826] Mem-Info:
[ 2532.800463][T29826] active_anon:287 inactive_anon:302256 isolated_anon:0
[ 2532.800463][T29826]  active_file:9647 inactive_file:137793 isolated_file:0
[ 2532.800463][T29826]  unevictable:768 dirty:342 writeback:0
[ 2532.800463][T29826]  slab_reclaimable:26269 slab_unreclaimable:151229
[ 2532.800463][T29826]  mapped:65177 shmem:10376 pagetables:62434 bounce:0
[ 2532.800463][T29826]  kernel_misc_reclaimable:0
[ 2532.800463][T29826]  free:810851 free_pcp:16819 free_cma:0
[ 2532.842636][T29826] Node 0 active_anon:1144kB inactive_anon:1021100kB active_file:27620kB inactive_file:549264kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:260708kB dirty:1000kB writeback:0kB shmem:39024kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 516096kB writeback_tmp:0kB kernel_stack:17628kB pagetables:39964kB all_unreclaimable? no
[ 2532.874861][T29826] Node 1 active_anon:4kB inactive_anon:187924kB active_file:10968kB inactive_file:1908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:368kB writeback:0kB shmem:2480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:58404kB pagetables:209772kB all_unreclaimable? no
[ 2532.905418][T29826] Node 0 DMA free:13240kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:620kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:120kB free_cma:0kB
[ 2532.933404][T29826] lowmem_reserve[]: 0 2647 2648 2648 2648
[ 2532.939227][T29826] Node 0 DMA32 free:151768kB boost:0kB min:35688kB low:44608kB high:53528kB reserved_highatomic:0KB active_anon:1144kB inactive_anon:1020480kB active_file:27612kB inactive_file:549264kB unevictable:1536kB writepending:1000kB present:3129332kB managed:2718872kB mlocked:0kB bounce:0kB free_pcp:24536kB local_pcp:10392kB free_cma:0kB
[ 2532.970509][T29826] lowmem_reserve[]: 0 0 0 0 0
[ 2532.975283][T29826] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:656kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2533.001868][T29826] lowmem_reserve[]: 0 0 0 0 0
[ 2533.007009][T29826] Node 1 Normal free:3078396kB boost:0kB min:54208kB low:67760kB high:81312kB reserved_highatomic:0KB active_anon:4kB inactive_anon:187924kB active_file:10968kB inactive_file:1908kB unevictable:1536kB writepending:368kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:41896kB local_pcp:13028kB free_cma:0kB
[ 2533.037597][T29826] lowmem_reserve[]: 0 0 0 0 0
[ 2533.042321][T29826] Node 0 DMA: 68*4kB (UM) 9*8kB (UM) 14*16kB (UM) 14*32kB (UME) 9*64kB (UME) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 13240kB
[ 2533.059152][T29826] Node 0 DMA32: 1028*4kB (M) 679*8kB (UME) 1175*16kB (UME) 527*32kB (UME) 191*64kB (UME) 159*128kB (UME) 55*256kB (UME) 21*512kB (U) 10*1024kB (U) 13*2048kB (M) 3*4096kB (M) = 151768kB
[ 2533.077560][T29826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 2533.089118][T29826] Node 1 Normal: 36609*4kB (UME) 21483*8kB (UME) 10692*16kB (UME) 5141*32kB (UME) 1311*64kB (UME) 194*128kB (UME) 12*256kB (UME) 3*512kB (UM) 1*1024kB (M) 6*2048kB (U) 561*4096kB (UM) = 3078396kB
[ 2533.108499][T29826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2533.118092][T29826] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2533.127410][T29826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2533.137042][T29826] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2533.146403][T29826] 61089 total pagecache pages
[ 2533.146953][T12394] Bluetooth: hci0: command 0x0419 tx timeout
[ 2533.151067][T29826] 0 pages in swap cache
[ 2533.151077][T29826] Swap cache stats: add 0, delete 0, find 0/0
[ 2533.151092][T29826] Free swap  = 0kB
[ 2533.151100][T29826] Total swap = 0kB
[ 2533.174735][T29826] 2097051 pages RAM
[ 2533.178533][T29826] 0 pages HighMem/MovableOnly
[ 2533.183199][T29826] 383924 pages reserved
[ 2533.187410][T29826] 0 pages cma reserved
[ 2535.091521][T29826] ptm ptm0: ldisc open failed (-12), clearing slot 0
17:01:27 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x20000000) (fail_nth: 2)

17:01:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:27 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:27 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x355]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KDDISABIO(r1, 0x4b37)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20003fe, 0x2b, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:27 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x321}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2535.309722][T29858] xt_check_match: 4 callbacks suppressed
[ 2535.309741][T29858] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2535.319502][T29855] xt_cluster_mt_checkentry: 25 callbacks suppressed
[ 2535.319517][T29855] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2535.358610][T29859] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:27 executing program 2:
r0 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r0, 0x1, 0xffffffffffffffff, 0x3)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000400)=ANY=[@ANYBLOB="9e7e1d9e6da87f5fd1f5193c59a16a581823ba05fc4224dc26a1d9821168949d5eba496a2d28552dde0eb58c5ace3ad4683e258772923b35e41cc2e73d7263f6f1c7f1db8ae75369e502370300000000000000b70105968bfea7ad00ae3964084cc873fa98c376a1913ac9361868d2ffbca77d1503cdf1f1c60a090646dd47e45ffeec7c50b685df2ad01ff6118e4fe4adb14db1126d63a44d3a4b9f2838db2166f9dae30100000000000000ebdc64a94d2e6dfcd4f9da0c5ad382eee80c75b97798a9e2e7ce5f02bf072bf2e49aa268c802e20124c257aa73c14dbe8e6089acadfb00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000640)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f0000000700)={'ip6tnl0\x00', &(0x7f0000000680)={'sit0\x00', r4, 0x4, 0x7, 0x0, 0x9, 0x40, @dev={0xfe, 0x80, '\x00', 0x39}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x8, 0x2800000}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r2}, 0x10)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x800)
accept4(r5, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000740), &(0x7f0000000780)=0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000300)=@buf={0xd0, &(0x7f0000000040)="0edfdc7ba0c7549c2751cdffd7bb643abe9433c82e6bda8503496f9ce107dc00fa083f7b7b10e2d51e085c1fac0a384f037e29266a9f1d6cb96fb10f44525c5bfd6a4e11bd2a492483140ba33268d6a8d9d95901b7ec463a577f17593f519c36dfef063c5c90e9f409273231b54104db5f696b4e83b921870e8e1023ac49d305533586f4b234a055ea75e9f2f3d374838c4a263567163c264729c308cc2153fa4500c2044cf36d5accef352886a01ba70a49cb1dd83e6c56dee2a5b0b2b73fab54d74e0e4f2e260e9f3b3a6e5a0af2aa"})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@private1, 0x4b})
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2535.433931][T29865] ptm ptm0: ldisc open failed (-12), clearing slot 0
[ 2535.502156][T29875] FAULT_INJECTION: forcing a failure.
[ 2535.502156][T29875] name failslab, interval 1, probability 0, space 0, times 0
[ 2535.515186][T29875] CPU: 0 PID: 29875 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
[ 2535.523612][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2535.533673][T29875] Call Trace:
[ 2535.536949][T29875]  <TASK>
[ 2535.539884][T29875]  dump_stack_lvl+0xcd/0x134
[ 2535.544482][T29875]  should_fail.cold+0x5/0xa
[ 2535.548994][T29875]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[ 2535.554375][T29875]  should_failslab+0x5/0x10
[ 2535.558887][T29875]  __kmalloc+0x72/0x340
[ 2535.563054][T29875]  tomoyo_encode2.part.0+0xe9/0x3a0
[ 2535.568263][T29875]  tomoyo_encode+0x28/0x50
[ 2535.572760][T29875]  tomoyo_realpath_from_path+0x186/0x620
[ 2535.578403][T29875]  ? tomoyo_profile+0x42/0x50
[ 2535.583098][T29875]  tomoyo_path_number_perm+0x1d5/0x590
[ 2535.588566][T29875]  ? tomoyo_path_number_perm+0x18d/0x590
[ 2535.594209][T29875]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 2535.600024][T29875]  ? check_path.constprop.0+0x50/0x50
[ 2535.605402][T29875]  ? lock_downgrade+0x6e0/0x6e0
[ 2535.610254][T29875]  ? __fget_files+0x23d/0x3e0
[ 2535.614927][T29875]  security_file_ioctl+0x50/0xb0
[ 2535.619859][T29875]  __x64_sys_ioctl+0xb3/0x200
[ 2535.624632][T29875]  do_syscall_64+0x35/0xb0
[ 2535.629044][T29875]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2535.634929][T29875] RIP: 0033:0x7fd2b87e0ae9
[ 2535.639334][T29875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2535.659076][T29875] RSP: 002b:00007fd2b5d35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2535.667481][T29875] RAX: ffffffffffffffda RBX: 00007fd2b88f4020 RCX: 00007fd2b87e0ae9
[ 2535.675436][T29875] RDX: 0000000020000000 RSI: 0000000000005411 RDI: 0000000000000003
[ 2535.683391][T29875] RBP: 00007fd2b5d351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2535.691444][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
17:01:27 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x328}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2535.699405][T29875] R13: 00007ffcc345574f R14: 00007fd2b5d35300 R15: 0000000000022000
[ 2535.707383][T29875]  </TASK>
[ 2535.711117][T29875] ERROR: Out of memory at tomoyo_realpath_from_path.
17:01:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup3(r2, r0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:27 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2535.759188][T29881] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2535.767513][T29880] sctp: [Deprecated]: syz-executor.2 (pid 29880) Use of int in maxseg socket option.
[ 2535.767513][T29880] Use struct sctp_assoc_value instead
[ 2535.844387][T29882] sctp: [Deprecated]: syz-executor.2 (pid 29882) Use of int in maxseg socket option.
[ 2535.844387][T29882] Use struct sctp_assoc_value instead
[ 2535.862704][T29886] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2535.918620][T29886] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2535.933853][T29895] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2536.014127][T29897] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:28 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x20000000) (fail_nth: 3)

17:01:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="48b7a1ebd4fafda1ad43bb328a47375023000000c4f500a19eac1900"/56], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
recvfrom(r1, &(0x7f0000000080)=""/27, 0x1b, 0x2073, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x0, 0x2, {0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x7f}, 0x9b}}}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:28 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x37a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:28 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:28 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x40000000006a0901)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0)
write$binfmt_elf64(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x59, 0x6, 0xf7, 0xc988, 0x2, 0x3e, 0x4d, 0x7a, 0x40, 0x3c0, 0x496, 0x0, 0x38, 0x1, 0x94, 0x9, 0x3}, [{0x5, 0x1ff80000, 0x2, 0x3, 0x401, 0x800, 0x7}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1a78)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2536.377009][T29915] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2536.380618][T29918] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2536.416535][T29913] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:28 executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00'}, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000100)=@raw=[@alu={0x4, 0x0, 0xb, 0x0, 0xb, 0x6, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x1, 0xc950ec8f705df720, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x93}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, @alu={0x4, 0x0, 0x6, 0x3, 0xb, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000040)='syzkaller\x00', 0x1000, 0xe, &(0x7f0000000300)=""/14, 0x40f00, 0x15, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x3, 0xffffffff, 0x1}, 0x10}, 0x78)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x3}}, './file0\x00'})
connect$vsock_stream(r4, &(0x7f00000000c0), 0x10)

[ 2536.479842][T29913] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2536.525875][T29931] FAULT_INJECTION: forcing a failure.
[ 2536.525875][T29931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2536.539146][T29931] CPU: 1 PID: 29931 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0
[ 2536.547569][T29931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2536.557622][T29931] Call Trace:
[ 2536.560896][T29931]  <TASK>
[ 2536.563820][T29931]  dump_stack_lvl+0xcd/0x134
[ 2536.568424][T29931]  should_fail.cold+0x5/0xa
[ 2536.572936][T29931]  _copy_to_user+0x2c/0x150
[ 2536.577448][T29931]  simple_read_from_buffer+0xcc/0x160
[ 2536.582828][T29931]  proc_fail_nth_read+0x187/0x220
[ 2536.587861][T29931]  ? proc_sessionid_read+0x220/0x220
[ 2536.593155][T29931]  ? security_file_permission+0xab/0xd0
[ 2536.598714][T29931]  ? proc_sessionid_read+0x220/0x220
[ 2536.604019][T29931]  vfs_read+0x1b5/0x600
[ 2536.608194][T29931]  ksys_read+0x12d/0x250
[ 2536.612453][T29931]  ? vfs_write+0xae0/0xae0
[ 2536.616885][T29931]  ? syscall_enter_from_user_mode+0x21/0x70
[ 2536.622792][T29931]  do_syscall_64+0x35/0xb0
[ 2536.627211][T29931]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2536.633113][T29931] RIP: 0033:0x7fd2b879369c
[ 2536.637534][T29931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2536.657145][T29931] RSP: 002b:00007fd2b5d35170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2536.658648][T29936] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:28 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x84300, 0x0)
syz_open_pts(r3, 0xc801)
write$P9_RATTACH(r0, 0x0, 0x0)
r4 = syz_mount_image$qnx6(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1f, 0x5, &(0x7f0000000540)=[{&(0x7f0000000180)="e68e718a6c999f23d3ad470c8db0294c8114809cf94dc5e06aa5ab7a71c75f7681cdc220bcc953b4f2bb348fc5c0abb1d28bd46c64370d94aa78b4c3fa81b7d42b9da726baff89a72de6b3397a121fed3a9bc89b6ebfedf2b091966e9a8bd99611dd2dcd4f8d9e19a46861d53300b5b541c878ab08f5a76ba805a6dd4aa066e42d9998f75d59e4e035583fbffa5e228b98", 0x91, 0x5}, {&(0x7f0000000280)="3a1c103fbc30cc36a6857a1ff3fbf456352693cc3b3f90910c8473700606b0bf3266593d7c5bc8cd0ff7fbb4a08e3b31580819f5d3359a68a0f713aefa85c00dbf7de425a46d935aadaf833373ec514916ab317018742305b8adcea4bcc7d3b31609aa0e3bdf87a46337c8fbd62012c741b18234649a99bb4c52154c277e9854014d92921b610f2899c5e41b31b16bb38f78b904e82c78", 0x97, 0x100}, {&(0x7f0000000340)="816d9da32dc4e743b36afe18fea465dfbb3795d9ca87da935946f06e5188cce7ec1844cee91c13b78ae1140e8bc9874bd13c162fc0ffc9fe0de475ba566093d5e744ff8d1165a5b922ffbfe98b8cb59e39230799659d3440e07c33dc", 0x5c, 0x7}, {&(0x7f00000003c0)="e68fc4f7b433d180be9357752b4c113d186c49529a88e0e4b5257e59f92f578783a9479a18e832e1d1ccccd94f82eb3f3b4984a48bf27644c0105b84643882f0a80620204af0f35cf58e1fb1e2b7b0c7555bf2162991ad9c4dca0255222c9b54fa63e071d38e0f904061b3bc9a209891e266c5df3fd31adf2a07fe8d1c0f7ddbd0ce54cf5b2854bde5ee339b216ebef58f56fbd2442cf54edd413f1415fffdead03652f1196031d5c4485b0b667970f57ff2fe385804f3e117af0c660cef8a09ef693c18c121cad05d07f0ab9f943424d27e136995cb0a7d0e5c50aaf2f17db787f620754bcbcf053283aa1586901cd3c44ebd16", 0xf4, 0x56}, {&(0x7f00000004c0)="16eee6011a1c7260de87a2eddba2101dd52d946ff8afb23150fb6cef7e814926bce37fd8a346df6478b5ae3343c398fe62902dba845ffcdbe161dee9c67438825428c889dbaf68d1258b6da119f43bb9bc7742eb0729acb8d4c7542653eeb6ec", 0x60, 0xb5}], 0x20000, &(0x7f00000005c0)={[{'('}, {}, {'['}], [{@obj_user={'obj_user', 0x3d, '/dev/ptmx\x00'}}, {@subj_user}, {@smackfshat={'smackfshat', 0x3d, '/dev/ttynull\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@hash}, {@subj_user={'subj_user', 0x3d, '/dev/ttynull\x00'}}]})
dup2(r0, r4)

17:01:28 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x391]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2536.665647][T29931] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd2b879369c
[ 2536.665665][T29931] RDX: 000000000000000f RSI: 00007fd2b5d351e0 RDI: 0000000000000006
[ 2536.665679][T29931] RBP: 00007fd2b5d351d0 R08: 0000000000000000 R09: 0000000000000000
[ 2536.665694][T29931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2536.665709][T29931] R13: 00007ffcc345574f R14: 00007fd2b5d35300 R15: 0000000000022000
[ 2536.665741][T29931]  </TASK>
17:01:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_open_dev$ptys(0xc, 0x3, 0x1)
write$binfmt_misc(r2, &(0x7f0000000040)={'syz1', "db2661fe57c0bb4e6f590b9168618da24037a0868973829e186509c6078b2b85a874eca840eee6da833b4d0c56eec99d8ee6d70b15ec55b961747cdeb6e2e23c48607491ecff036863e42437aa18dd73cd55004f18c593eb"}, 0x5c)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2536.851427][T29942] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2536.909321][T29941] loop3: detected capacity change from 0 to 1
[ 2536.920231][T29946] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2537.025880][T29941] loop3: detected capacity change from 0 to 1
17:01:29 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x20000000)

17:01:29 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x390}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:29 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85a911316ce43d83b8"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
sendfile(r2, r3, &(0x7f0000000040)=0x6, 0x80000001)

17:01:29 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:29 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x8, "430300000008008e0400000000001d804f0a36"})
setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x81, 0x4)
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:29 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x48]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2537.568252][T29978] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:29 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0xfffffffd, 0x1, 0xff, 0xa, 0x0, 0xfffd}, 0x20)
dup3(r1, r2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x12)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000040), 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:29 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x391}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:29 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:30 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x4c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2538.059195][T30008] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:30 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x2, 0x20000000)

17:01:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d67000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket(0x200000000000011, 0x3, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x12000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='xdp_bulk_tx\x00', r2}, 0x10)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r4=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24008884)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:30 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x3, 0x28, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]})

17:01:30 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:30 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x500}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:30 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2538.661696][T30032] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:30 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8500e533f205030095"], &(0x7f0000000000)='syzkaller\x00', 0x2000004, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004180)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000400)=""/81, 0x51}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000100)=""/5, 0x5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000014c0)=""/45, 0x2d}, {&(0x7f0000001500)=""/4, 0x4}, {&(0x7f0000001540)=""/224, 0xe0}, {&(0x7f0000001640)=""/89, 0x59}, {&(0x7f00000016c0)=""/241, 0xf1}, {&(0x7f00000017c0)=""/215, 0xd7}, {&(0x7f00000018c0)=""/237, 0xed}, {&(0x7f00000019c0)=""/129, 0x81}], 0x8, &(0x7f0000001b00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000001b80), 0x6e, &(0x7f0000002d40)=[{&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/232, 0xe8}, {&(0x7f0000002d00)=""/56, 0x38}], 0x3, &(0x7f0000002d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000004000)=[{&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/63, 0x3f}, {&(0x7f0000003ec0)=""/42, 0x2a}, {&(0x7f0000003f00)=""/2, 0x2}, {&(0x7f0000003f40)=""/137, 0x89}], 0x5, &(0x7f0000004080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x4, 0x40012101, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000004280)=0x5, 0x8)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2538.707301][T30040] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:30 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1f)

17:01:30 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x600}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x60]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2539.092594][T30063] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:31 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:31 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x7, 0x80, 0x2, 0x4, 0x0, 0x7, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x80000000, 0x9bf1}, 0x0, 0xaf8f, 0x9, 0x1, 0x0, 0x1, 0x6, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xf, r1, 0x1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000300)={'ip6tnl0\x00', <r3=>0x0, 0x29, 0x1, 0x1, 0x1, 0x1e, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x80, 0x5}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @generic={0x7, 0x5, 0x9, 0x9, 0x3ff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @alu={0x4, 0x0, 0xa, 0xb, 0x3, 0x100, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x8001, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x5, 0x1f}, 0x10}, 0x78)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @hyper}, 0x10)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040))

17:01:31 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x10, 0x20000000)

17:01:31 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x68]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:31 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:31 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0x10, &(0x7f0000000340)={&(0x7f0000001400)=""/244, 0xf4, <r2=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x13, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@exit, @ldst={0x2, 0x0, 0x6, 0x3, 0x5, 0x2, 0x10}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf0}, @generic={0x8, 0xd, 0x1, 0x5, 0x7ff}, @jmp={0x5, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x8, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0xf, 0x6, 0x10001}, 0x10, r2}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:31 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000000)={0xffffff0000000000, 0x2, 0x7fffffff, 0x8000, 0x80000001, 0x4})
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:31 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1100}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:31 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x74]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:32 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x7a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:32 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:32 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4c01, 0x20000000)

17:01:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="8500c7b581dfbd293c01f3599ac8279d960000d550"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = getpid()
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000005c0)=<r3=>0x0)
rt_tgsigqueueinfo(r3, r2, 0x30, &(0x7f0000000600)={0x37, 0x5, 0x100})
sched_setscheduler(r2, 0x0, 0x0)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0xff, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x4}, 0x40288, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="94b70c00040000009500000744c0fce7993405edff0700000000000002000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xed, &(0x7f0000000400)=""/237, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0x9, 0xfe4e, 0x2}, 0x10}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f00000002c0)=0x4, 0x4)

17:01:32 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1f00}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:32 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
dup3(0xffffffffffffffff, r0, 0x0)
r2 = syz_io_uring_complete(0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)
ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000000c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:32 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:32 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2540.686697][T30149] xt_check_match: 7 callbacks suppressed
[ 2540.686719][T30149] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2540.696243][T30153] xt_cluster_mt_checkentry: 33 callbacks suppressed
[ 2540.696259][T30153] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2540.736339][T30148] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='hsw_stream_alloc_request\x00', r0}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:32 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:32 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000340), 0x200, 0x800)
write$P9_RLERRORu(r4, &(0x7f0000000380)={0x16, 0x7, 0x2, {{0x9, ']*{\\@-\\$/'}}}, 0x16)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xc)
write$P9_RATTACH(r0, 0x0, 0x0)
pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="d67d5f69b1903b2cdca441343e477b92428237bc1249d3af", 0x18}, {&(0x7f00000000c0)="728c0038ca8762f05e87daacbd234f63682a43ec9755a662147e07ea6b3fb9056fda5b0110357ef84ba2888a", 0x2c}, {&(0x7f0000000140)="e297a58cc2e16617ed1fcfc618b88cb7205bceb69762474cb8ee49a1b45f8665ded3a81e0d776e95e174b5f96c95792e4a05945e098fe03aa3ca538c864c2775a49ecdc4b8ebd98a041e230e7c63785c03789dbe4821dd5dfebdb3", 0x5b}, {&(0x7f00000001c0)="08059abafe6d4884427442a7b3e24c6022bcf97a99441289149f2379e6297d58562b9fb4b1e24b951649d10a61b49853693241fc67c02a8d1879f39905ccc0b2742368493718638500ec9b14720254bb94ac52688bcd9e709f67d9a988bdde3ec6d8d0", 0x63}, {&(0x7f0000000280)="43d700178be0d41ce3bcb8826b1c3d521b4a89dda82ab603914f862b37fea74ccf9aaef145312d602ec48a", 0x2b}], 0x5, 0x5, 0x0)

[ 2540.846386][T30148] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:33 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:33 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xed]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2541.080112][T30172] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2541.105835][T30175] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2541.183022][T30183] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2541.201062][T30172] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2541.288046][T30188] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2541.346353][T30190] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:33 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5409, 0x20000000)

17:01:33 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003702000205000000000000000900000000000000", @ANYRES32, @ANYBLOB="0e71e465742f6465765f736e6d703600"], 0x2c)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = syz_open_pts(r1, 0x4000000000000002)
ioctl$KDADDIO(r3, 0x4b34, 0x10001)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x94, 0x80, 0x4, 0x2, 0xa, "53aa9d876ee71e89"})
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006d00000095", @ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa1, &(0x7f0000000180)=""/161, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000480)=0xffffbd1b, 0x4)
r5 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x1c, &(0x7f0000000100)=""/28, 0x41000, 0x12, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000002c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x4, 0x0, 0x75b}, 0x10}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:33 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2103}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:33 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2541.756603][T30202] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2541.757606][T30203] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:33 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x12e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2541.823076][T30204] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_io_uring_complete(0x0)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
syz_open_pts(r3, 0x14002)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x4, 0x7, 0x6, 0x3, 0x19, "defe9aee31a5518b4ad76f99cfa4198996108b"})
r4 = syz_open_pts(r1, 0x10500)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000000c0))
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000000c0))

17:01:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="8501003779fde51767"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000100)=[{&(0x7f00000000c0)="a093688f09caa1cebc6b09309623ef8caf54d877b618f9663e6e57215c8c6ceaedb4b85b7a02b3b6d283c72eb31572c76569ccac", 0x34, 0x31f6}, {&(0x7f0000000400)="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", 0x1000, 0x3}], 0x7c00, &(0x7f0000001400)=ANY=[@ANYBLOB="73797a6b616c6c6572002c73797a6b616c6c6572002c73797a6b616c6c2208622fe9313809616c6c6572002c2c73796b616c6e6572002cf466d042ddb422eeec5968ef9cc8570bf630aefeb9ac6e843d9a17ad23152c285948467d77d5812c"])

17:01:34 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2801}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x143]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:34 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2542.127153][T30232] loop2: detected capacity change from 0 to 49
[ 2542.183077][T30241] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2542.255421][T30247] loop2: detected capacity change from 0 to 49
17:01:34 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540b, 0x20000000)

17:01:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:34 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000))
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xed, 0x1, 0x2, 0xc6, 0x1, ' \x00'})
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x10001, 0x10001, 0x101, 0x7, 0x8, "1ce1725d18f537ae499454ccb5cc8213c0b2ae", 0xac31})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9)
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0))
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:34 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2803}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:34 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:34 executing program 2:
syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x21c000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0xfffffffd, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x800)
accept4(r4, 0x0, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r6 = socket(0x200000000000011, 0x3, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40080c0)
r7 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000680)={0x11, 0x0, r8, 0x1, 0x9, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}, [@ldst={0x0, 0x2, 0x3, 0x4, 0x0, 0x10, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xd9, &(0x7f0000000400)=""/217, 0x40f00, 0x18, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x36, 0x5, 0x200}, 0x10}, 0x78)

[ 2542.807597][T30267] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:34 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:35 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000006c0))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r4 = eventfd2(0x4, 0x800)
preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f0000000000)=""/27, 0x1b}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/135, 0x87}], 0x8, 0x3, 0x5)
write$P9_RATTACH(r0, 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000640), 0x189000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000680)={{0x1, 0x1, 0x18, r5}, './file0\x00'})

17:01:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='fsi_master_acf_poll_response_busy\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
bind$vsock_stream(r1, &(0x7f0000000680)={0x28, 0x0, 0x0, @hyper}, 0x10)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x9, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000}, [@jmp={0x5, 0x1, 0x4, 0x2, 0x9, 0xc, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x21}]}, &(0x7f0000000100)='syzkaller\x00', 0x100, 0x8c, &(0x7f0000000480)=""/140, 0x41100, 0x3, '\x00', 0x0, 0xd, r3, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0xfffffffd, 0x1f}, 0x10}, 0x78)
r4 = getpid()
sched_setscheduler(r4, 0x0, 0x0)
syz_open_procfs(r4, &(0x7f0000000a80)='net/netfilter\x00')
r5 = socket$bt_rfcomm(0x1f, 0x3, 0x3)
r6 = socket(0x200000000000011, 0x3, 0x0)
r7 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)=@bridge_getlink={0x2fc, 0x12, 0x400, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x20020, 0x9602}, [@IFLA_GROUP={0x8, 0x1b, 0x7f}, @IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x80b1e}]}}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_VF_PORTS={0xf8, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4c7d5481908816910d1cdda27add94a0"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65e369dd1ef9f711125f7f7b672f23e0"}, @IFLA_PORT_VF={0x8, 0x1, 0xba}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ef2952bb2e43e4054e8f6c8cd981ae0e"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b05a34db3a3ccdfc9c1f3ce4a5224f60"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x72}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6944dee9bc7395a2afcc54b94a7a328f"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "60657a159665638425fad76fb0f8b470"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "8ca5fc87806c61adf104b62ae78a258c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "289144122484d214eb73d9c60222a69a"}, @IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}, @IFLA_PORT_SELF={0x50, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "8d594927c444167de2b8227385704c68"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x26, 0x2, 'fsi_master_acf_poll_response_busy\x00'}]}, @IFLA_LINKINFO={0x104, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xf4, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x58, 0x5, 0x0, 0x1, [{0xa}, {0xa, 0x4, @multicast}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, {0xa}, {0xa, 0x4, @local}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @broadcast}]}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa}]}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x11}, @IFLA_MACVLAN_MACADDR_DATA={0x4c, 0x5, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x4, @random="6d5f42fd0dde"}, {0xa, 0x4, @random="68d6f0cd77da"}, {0xa, 0x4, @broadcast}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}, @IFLA_LINK={0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4a005}, 0x8c4)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0xffff)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000040)={0xa})

17:01:35 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:35 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2e01}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1c6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2543.155550][T30296] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:35 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540c, 0x20000000)

17:01:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="85fa70d5cf62f6cded"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r1, 0x0, 0xffffffffffffffff, 0x3)
symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:35 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:35 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1ca]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:35 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:35 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x3402}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x234]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2543.896490][T30330] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:36 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000140)={{r0}, 0x1, &(0x7f0000000000)=[0x0], 0x8, 0x4, [0x7fffffff, 0x9, 0x1, 0x4000000000]})
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006dded91795"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x800)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f0000000040), 0x8)
r3 = socket$inet(0x2, 0x5, 0x1796)
setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f0000000300)=0x9, 0x4)
r4 = socket(0x200000000000011, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x0)
listen(0xffffffffffffffff, 0x800)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000000040), 0x8)
accept$alg(r6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r7=>0x0})
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x2c, 0x49, 0x800, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r7}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x4000001)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:36 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:36 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4301}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2544.290688][T30359] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2544.349388][T30364] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:36 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540d, 0x20000000)

17:01:36 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:36 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
dup2(r1, r2)
r3 = syz_open_pts(r1, 0x4000000000000002)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000004c0)={'ip_vti0\x00', <r1=>0x0, 0xff00, 0x8, 0x9, 0x8, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x68, 0x0, 0x49, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4c, 0xef, 0x1, 0x9, [{@loopback}, {@private=0xa010102, 0x80}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010100, 0x3ff}, {@rand_addr=0x64010101, 0x8001}, {@multicast1, 0x1}, {@multicast2, 0xb0b}, {@broadcast, 0x6}]}, @cipso={0x86, 0x15, 0x3, [{0x2, 0x4, "4fdf"}, {0x1, 0xb, "e30b5c2286a3581968"}]}]}}}}})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x8, 0x5, 0x5, 0x40, 0x8}], &(0x7f0000000080)='GPL\x00', 0x4, 0xa9, &(0x7f0000000400)=""/169, 0x41100, 0x4, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x3ff, 0x5}, 0x10, 0x2e28, r0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x6, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1}, [@map={0x18, 0x2, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x8, 0x7, 0xa, 0x2, 0xfffffffffffffff0}]}, &(0x7f0000000600)='GPL\x00', 0x52c57fb, 0xec, &(0x7f0000000640)=""/236, 0x1f00, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x5, 0x471, 0x7ff}, 0x10}, 0x78)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:36 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:36 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4800}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:37 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2544.989596][T30383] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x5fb900)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='f2fs_direct_IO_exit\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000100)='./file0\x00', 0x0, 0x38}, 0x10)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4000010, r3, 0xc0324000)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:37 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:37 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
preadv(r1, &(0x7f0000000000), 0x0, 0x6, 0xb0d5)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = syz_open_pts(r2, 0x4000000000000002)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r4, 0x0, 0x0)

17:01:37 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4c00}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:37 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:38 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540e, 0x20000000)

17:01:38 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="01000400000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x800)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x800)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000000040), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000002c0)=0x3, 0x8)
bind$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @host}, 0x10)

17:01:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200180, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x0, 0x3, 0x3fff8000000000}}, 0x28)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
r4 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x2, 0x81, 0x4, 0x2f, 0x0, 0x1000, 0x28001, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1ff, 0x7}, 0x80, 0x4, 0x1, 0x0, 0x5, 0x7ffe, 0x20, 0x0, 0x5, 0x0, 0x80000000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x20, 0x7f, 0x80, 0x80, 0x0, 0x1, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x3ff, 0x6000}, 0xcf7fc370f8f91be0, 0x4, 0x8001, 0x0, 0x80, 0x7, 0x8ec9, 0x0, 0x6, 0x0, 0x80}, r3, 0xf, r4, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r5 = syz_open_pts(r1, 0x4000000000000002)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x10, r0, 0x10000000)
syz_io_uring_submit(0x0, r6, &(0x7f0000000380)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x8, &(0x7f0000000200), 0x1, 0x1}, 0x400000)
r7 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r7, 0x0, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x5)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000))
dup3(r5, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
syz_open_pts(r0, 0x0)

17:01:38 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x5000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:38 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x290]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2546.096911][T30437] xt_check_match: 2 callbacks suppressed
[ 2546.096930][T30437] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2546.137966][T30441] xt_cluster_mt_checkentry: 34 callbacks suppressed
[ 2546.137985][T30441] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006d04a2fa9169deae75a1d8757c7c4f6cd30b95d205e8c566af778841abf5728c75453fda3bae2516054dac70f3749206b4db23240fb7b51d5008610de2f4bdbb7a8ff1b638fc96664bbffa535256122a2f48a35bed6ae81706942fc5744a81b5e93c5e2695d1dc90508096e80912277a5e7d28871523a5c87745bf9a2217e6dae563d4567a2d20c8c76ab41868b48988672ce2c017dfae7bd9cbf211ba"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0xffffd8ef, @host}, 0x10)

17:01:38 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x294]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:38 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000260000012dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="f4ff08ff0ff0080004000a0004000a0004000a0004000a0004000a0000000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x8014)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x11)
r3 = syz_open_pts(r1, 0x4000000000000002)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2546.220451][T30442] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2546.258702][T30444] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2546.303152][T30442] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:38 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:38 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x5002}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="180000000100000008001e0006070602000800007a7940c58590937c0c01feff0000000018000000ffffff7f00000000000000019f7b0200f0ffffff9500000000000000"], &(0x7f0000000080)='GPL\x00', 0x80, 0x62, &(0x7f00000000c0)=""/98, 0x40f00, 0x8, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0xc1e, 0x6}, 0x10, 0x0, r0}, 0x78)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f00000061c0)={0x5, 0x80, 0x1, 0x0, 0x6, 0x2, 0x0, 0x130, 0x40800, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x0, 0x52b4, 0x800, 0x8, 0x4, 0x3, 0x6, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x5001a, 0xecf, 0x0, 0x7, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x6, r3, 0x1)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x19, 0x4, 0x4, 0x400}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, 0x0, 0x0}, 0x20)
r6 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x202)
accept$packet(r6, &(0x7f0000000480)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={0xffffffffffffffff, 0xfffffffffffffce3, &(0x7f0000001c80)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x6, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0xb, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0xc, '\x00', 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9}, 0x78)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000060600000000000000008efe63d5006f00000095", @ANYRESOCT=r8, @ANYRES32=r4], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r10}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x19, 0x10, &(0x7f00000018c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="0000000002000000850000004c1109898889c48fcff0b60000b3dc8f3abd11e7a8006003000000000000b87bb47c22ecffffff0880000000000000950000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f0000000600)=""/4096, 0x41100, 0x10, '\x00', r7, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0xc, 0xa, 0xce95}, 0x10, r9, r10}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000004c0)='GPL\x00', 0x6, 0xc4, &(0x7f0000000500)=""/196, 0x0, 0x3, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x9, 0x9, 0x7}, 0x10, r9, r2}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2546.408992][T30458] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2546.540186][T30468] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2546.647832][T30470] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2546.726649][T30470] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:39 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540f, 0x20000000)

17:01:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x29a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:39 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x8000, 0x100000, 0x0, 0x0, 0x18, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r4 = open_tree(r3, &(0x7f0000000140)='./file0\x00', 0xc9801)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000180)={0xe626, 0xffffff80, 0x7ff, 0xffffffc1, 0x6, "42da45f85d1ed0dcfab35c33c9ced0d27848d4"})
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff, 0xb}, 0x20)
write(r5, &(0x7f0000000300)="550131ece6f08d383f8c4914fed2decdabd9c78e73c43e8a722a6e51edb02b34a786ce5c844b09ad79851a7d71ad3eb4ab753dc638882e7041bf8a24f60028ab40821adf414401857b54a659d8d46c9722ed1f4c057802a21c7e0952ec878c62444a909dd1f069522eada515bde8dd28e1e817b5510df6d3e10782a788d81ad6de5164b5998ed9f1c50b960c08aaea3d31ae9cc21a98d7d2ace9a54770795013deb79fda279e64a509191d20b221fdb4d434664f5364245ee0d4277cd4627d421fd3b07a53165b1f2384e4e0ca13ed6ddd65e78a799ef19888193b3a1d5226a64d2c50", 0xe3)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000400)={&(0x7f00000001c0)=[0x9, 0x4, 0x0, 0x3ea9], 0x4, 0x80000, 0x0, <r6=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000002c0)={0x8, 0x8283, 0x1, 0x71, 0xe, "ed26cb649b37645d7b40cc9ff00ae88dc18dbc"})
signalfd(r0, &(0x7f0000000200)={[0x7]}, 0x8)

17:01:39 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneigh={0x14, 0x1e, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:39 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:39 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x5500}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2547.170314][T30485] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2547.210688][T30489] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:39 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x3f, 0x9, 0xff, 0x3, 0x4, "1f85a69e8bd3c583"})
dup3(r2, r0, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140), 0x509900, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
write$binfmt_aout(r3, &(0x7f0000000700)={{0xcc, 0x81, 0xf8, 0x8b, 0x269, 0x8, 0xf9, 0x94}, "195d83ba24ec14822b16787bccc44f5822c350cbbd3f2a41d42fc186e0fb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x83e)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000011940)={0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0xfff}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x2000000000005, 0x8000, 0x0, r7}}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xd6c2, {0x0, 0x2, 0x7fff, 0x2, 0x5, 0xfffffc00, {0x5, 0x7, 0x3, 0x1f, 0x2, 0xfffffffffffffff8, 0xffffffff, 0x1400, 0x0, 0x0, 0x8, r5, r6, 0x7, 0xfffffffd}}}, &(0x7f0000000700)=ANY=[], &(0x7f0000011780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x0, &(0x7f0000011900)={0x20, 0xffffffffffffffda, 0x5, {0x4, 0x0, 0x9c0, 0x3}}})
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r5}}]}})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_elf64(r8, &(0x7f0000004200)=ANY=[@ANYBLOB="7f454c4606ff0112020000000000000003003e004f0000007b02000000000000400000000000000018000000000000000900000002003800020009000500b2fc51e57464ca020000ff03000000000000ffffffffffffffff000800000000000098ee00000000000081000000000000002000000000000000aa1d0db897150000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001737b1f65c1f81327f683a3ce712107307fd8d4f5d231343e2b02aa375723f7fc39a16d99e3a323b2b38836586136707c4b3ab0199a3814e23823338cdc88e1242332d7865b70d321df9781b7ded962ebae062b76ae53523048476e1947dd3a404"], 0x97e)

[ 2547.272040][T30488] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:39 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x800)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r4=>0x0})
sendmsg$xdp(r3, &(0x7f0000000880)={&(0x7f0000000300)={0x2c, 0x4, r4, 0x3e}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="8995d0f4cac311a26c6cb074f46326a99cfaef871fa04ce84a5d1635d63feda90873ac51ee92b4fa77bb10a8f8493a2e86aa82de366ae178902b09e8e8764365855aba7e98c0b0ee32f6c0be2aaade7600bc48b2263ad551e49db287a50d65bfa748a86d30ab71ceaf2c512944b4007911a7d84358e675be3e74afaaae3aae71bed81e44b7af10ee61fee368191d39444ee4f4b6ec5a585db6082fd622843fdfa8b0092fb993b3d7e207d394bd273084e5da6dc32a103ae227edafcb1d7addab66e3e10bf70ab6f8ad7a137533", 0xcd}, {&(0x7f0000000340)="c75667", 0x3}, {&(0x7f0000000600)="d590a1d62d3b60822eff57918d6ba7bf1bcb660be477a1e7266754bb42914310f61c1b55c64bbf7b91e31a10f4e1953d2055d9fbcd7e8ff55143022a232fa3c58d45414c88af50dee8fb00ee92f6ec8a1fdb344a0efcc448bd58671261ab1b3233c66d03f27b27785345f770be5dee58e0bf8e4b8e4b1890646d47815c6def93d440acd5a2e88c91d32c7193111cac2313ce26d16761eb28fb9f976d5436aea717ca975ad460c5b5b2b923ad8ea7c2cc57ddff0ba1bb20812d2b29b14e497390348f7372ad5b5cac", 0xc8}, {&(0x7f0000000700)="7e0a474fcd5c92c2cd6d541f0f050191531917a4524984f06603f77339bbed89bb3d4484857c551a0ba9899913ec5721dc0a2061876109f81bcd13bb2df988b6b64e885495f86ddade73d67daf690226baebd0a4fae512bba2372871c910d75afb3dc8996d054b2eb5dc7633631080c2d3ca9fcd358338acd1e99dfad05ed047b8e87ed6b84872521dc8bf6a479b28d37efd77de46f1d36fab70abe88097ec900f8c55a8750d15469f511902c792009ae3aa1ede1c6f92b43ddac5fc6c5eee0318752630003540ad5c4a964bb33b70", 0xcf}], 0x5, 0x0, 0x0, 0x20000000}, 0x44815)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:39 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:39 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x5802}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2547.452621][T30511] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:39 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x321]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2547.564416][T30519] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2547.628334][T30523] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2547.655447][T30521] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:40 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5410, 0x20000000)

17:01:40 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002c80)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000002f00)=""/178, 0xb2}], 0x3, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000006c0)=""/134, 0x86}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/178, 0xb2}, {&(0x7f0000001840)=""/66, 0x42}, {&(0x7f00000018c0)=""/41, 0x29}, {&(0x7f0000001900)=""/227, 0xe3}, {&(0x7f00000004c0)=""/13, 0xd}, {&(0x7f0000001a40)=""/48, 0x30}, {&(0x7f0000001a80)=""/196, 0xc4}, {&(0x7f0000001b80)=""/12, 0xc}], 0xa, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}}, {{&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/86, 0x56}], 0x1, &(0x7f0000001ec0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000001f80), 0x6e, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/163, 0xa3}], 0x1, &(0x7f0000002100)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000000480)=[{&(0x7f0000002200)=""/116, 0x74}, {&(0x7f0000002280)=""/110, 0x6e}, {&(0x7f0000002300)=""/45, 0x2d}], 0x3, &(0x7f0000002380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000025c0)=[{&(0x7f0000002440)=""/29, 0x1d}, {&(0x7f0000002480)=""/1, 0x1}, {&(0x7f00000024c0)=""/209, 0xd1}], 0x3, &(0x7f0000002600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {<r2=>0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002700), 0x6e, &(0x7f0000002780), 0x0, &(0x7f0000002fc0)}}, {{&(0x7f00000028c0), 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002940)=""/174, 0xae}, {&(0x7f0000002a00)=""/36, 0x24}, {&(0x7f0000002a40)=""/253, 0xfd}, {&(0x7f0000002b40)=""/84, 0x54}], 0x4, &(0x7f0000002c00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x8, 0x40010022, 0x0)
writev(0xffffffffffffffff, &(0x7f00000034c0)=[{&(0x7f00000030c0)="d1274f3c551ce67cd9f8a0ae353e34b36282178080b28956272f4946a7e88054974ebeeb3d23d5d93767354433ccf15d78de02e96523545e58310ebe49bb34898b516b4a27a3ad6f5ebb3c3d910d9db055703cd17e6e520bb86bdffa0fba975e712d290d7517ca8417913b5f015f912045f7e6f8f5fa976f201884fd46f1529b9e6488fcfa4ea30df550", 0x8a}, {&(0x7f0000002880)="ceb89df158f00371d98ea2190ba37dca9cb0bdb47cd0ee0f658333169d12cb", 0x1f}, {&(0x7f0000003180)="a8b3ef079f2af7ab089c39ee4cf88c3f128a71c465fbae7f59", 0x19}, {&(0x7f00000031c0)="0df6c9c543718e8edbfdb3410e2f85b0af10f87ff157f06f633d026780101d4c5ac5c7fa7b036e5157f36d879953e93baf721f57f4ba09d8b90859ea7ec90dd9da0bc557af12a834e563109d7e1ea2adc143e1", 0x53}, {&(0x7f0000003240)="27512e35d1ff1912f15266198649950999088e213a8748c04e2cd8efa4badc905bef11a83b99", 0x26}, {&(0x7f0000003280)="886eb23b7e40ab7a49fc844ab3f77f3692bb5fd6a0444e4f6b199b61c8157dcbce2b140abaae9edb28283ddd", 0x2c}, {&(0x7f00000032c0)="4273a085db00d3fc6d293e195ccba767c9318e58687a520619ec2c3bfd9cf2ae5ff9c2b858a4c74e07c96efe8248776e3d2c1c2fd27addea5fa83e155577f240", 0x40}, {&(0x7f0000003300)="3a8c653d024ac56b27993bac5021278051f3c53fa6105f7552e620949266cc6deef85fb04ff690d5eacf42a4ce5bc66580c2bd427546d648febfddcf10e0443efd6a98c5219da38b0a26a898eb83754fcb58a388d81f52d3a4bc6b56e6d89b20fd0e719f48414ed1ee0832f354f25ff02802927b0ce911de2aff11393d5a115907270516cb7225b413585edd08420fbbba1d959e333cb50800093e0cfd6af6f629a5c55067fbb69f186bc78cef1fe4c8f9948a02c766d0ebcb24b8f044c7127613945e52fd5cc7654c13b611ec7586a76c763978b2fe578e626eba23d875887a4a8cf205a4726413d0e96cfb", 0xec}, {&(0x7f0000003400)="8bcf5509f9378bd947dd508d00e34e373bd6c630eb0a136d1e56e0da8f837c8b044cccadab34e943bb65be095cc4d41f6d71a38f63a42e0c59c4f6f416e53fa1eb3ba79650093ffa02af79715cb072d89102318072bf4534e5ae82f2f46c22ab804516134cb5293dce83b52e44d2d9d06ddb0a6b2df99c854e822316cb063ae692eac351e22dd61d4c852f17627905a170e8a8f4e96c7c4d4ee1928021", 0x9d}], 0x9)
r3 = openat(0xffffffffffffffff, &(0x7f0000002e80)='./file0\x00', 0x20002, 0xab)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x40, 0x4, 0x1b, 0x0, 0x9, 0x2010, 0x10, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x6044, 0x81, 0x7f, 0x7, 0x3, 0x2, 0x4, 0x0, 0x10000, 0x0, 0x1}, r2, 0x3, r3, 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
openat(0xffffffffffffffff, &(0x7f0000002ec0)='./file0\x00', 0x404200, 0x2)
listen(r4, 0x800)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x83, &(0x7f0000003640), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000002780)=0x3, 0x8)
listen(0xffffffffffffffff, 0x800)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000000040), 0x8)
getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000003580), &(0x7f0000003600)=0x80)
clone(0x8a8280, &(0x7f00000027c0)="6aa8157d39d50eb015707efb106fe8cc232078b207dd2c2caa2b6e2746116f0d1565da6f515e245a97d563876f43004785ed9204fb39009386edb1edea721538061b19e00195eb0c8502470ed18e63bf2c41b4d0b1c4c283efe5d89a82db678fd027f1a2a5d1caa69a353ab2323a10522f8b131ce58330e36549fbeab3116b670e8e462303ac48992ea69d08a42256d5d3bd4267bfb1bac7c3e98cfcc93f3923", &(0x7f0000000500), &(0x7f0000001a00), &(0x7f0000002340)="7fcc36688bab84372455c082c08f")
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:40 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x328]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:40 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:40 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:40 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2548.287535][T30542] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:40 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "200b000000003479048c7d00000800"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="000000009500170000000000000045d0a736591b589dd1b317a0c286000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$vcsa(&(0x7f0000000080), 0x0, 0x40001)
connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10)

17:01:40 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6800}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:40 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:40 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x390]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2548.716837][T30575] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2548.816321][T30582] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:41 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x800)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000040), 0x8)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="73c49b06775855fae0aef1e3844f27f9c13c7fb12379cbea0d3fed8017d40ad81933018010ee438fd826fb4fd0da732b39dfc21a6e828a8ab29a7115c98451ae7e0ae8efabd3d97bc2db3af206e976b53e539f2261b8701c31467959b7a3ac9a27760cb5254fdcb4253a902f3ce4d40372b1932045", @ANYRES16=r6, @ANYBLOB="000000000000000000005200000008000300", @ANYRES32=r8, @ANYBLOB="0500880000000000d0002a00bd0608021100000005bf2045013ea2eecd2637964801c2af9151b7edb6073dda955f2e88318f144b1ddbfd761f255645638f30fbc1247f075e1cfa1eec1676076441fb741f8ab82297bc66ff002dc6cbbfaf316d871a599ce9c1a537b5036b1f1ac113c896c3062f29a5f620c1263119539767f053edd38970511417635b9be0916628c07725576b92dc8908c5a29e1471ce6f334ae742e646de617d35808270fde32c23bf3035d8e99d866ff6a4399fd5f3ec2a724cdc6e5ca67333833934e107cf8c2563c040c95b1001590500890000000000"], 0xfc}}, 0x0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4044000)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x88c1)
r9 = syz_open_pts(r1, 0x4000000000000002)
dup3(r9, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:41 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5412, 0x20000000)

17:01:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="851d00ee2c01040095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_complete(0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_add_block_group\x00', r2}, 0x10)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x57, r3, &(0x7f00000000c0)="f50c2140db453b8256a58b904e4d415539e9d641514c9c05641bbf3355feb3e3d3278636", 0x24, 0x1, 0x0, 0x3, r4}, &(0x7f0000000400))
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:41 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6802}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:41 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x391]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:41 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:41 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2549.411839][T30595] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x18002, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @private}}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
openat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x80, 0x1e0}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
flistxattr(0xffffffffffffffff, &(0x7f00000006c0)=""/249, 0xf9)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:41 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:41 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x600]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:41 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6c00}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:41 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006d00000095fd7fd22b758af24ee3982a92da58474093bc9f7024abc1b4cb6f43c09f087f005ccab4cba34eda74d8fbc77de7301e727db7fa591eca3069df1a19fed002fdd95ae028e8fefbe5abe311cc6b55e2c3378ed4381c02170bd08160b96e5af9cc6795d3920446e4dc0aad7c73da386d0519a10d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:42 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5413, 0x20000000)

17:01:42 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:42 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7400}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:42 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xa00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:42 executing program 2:
r0 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r0, 0x0, 0xffffffffffffffff, 0x3)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3f62b4ac1a6d6c2c7452aca2556aa80e4e34e1bcf1a373258a6f8c6fcbee6e5918386929cb781dbc0d"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f00000002c0)=""/176, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r1}, 0x10)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x7f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='f2fs_direct_IO_exit\x00', r1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
dup3(r3, r4, 0x0)
connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10)

17:01:42 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0x2, 0x109a, 0x3ff}, &(0x7f0000000300)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x2}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='ext4_find_delalloc_range\x00', r0}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:42 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:42 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7a00}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:42 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x1f00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:43 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000007c00038078000400b4a0295a4aaa8c937bb10ffc5f5abdeff5f7aa116a0c0ab82215c747b105ba2847d4fc4445177592b780402cfc49afcc5f55529f2006eb1c98b3664a4d0558373c1fe06a4cefeb27df0c44fd56e65cce6cca2892aabd1548abe1180b33a1c3856f8418d59af978e97904b9e6bf20ad727fc969e5"], 0xa8}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f0000001180)={0x33c, r2, 0x5be582f3269e7966, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x24e, 0x5, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0x88, 0x5, "43b0d2b1949a52fb97db3c24175fa5570de5ea757c8efb3610d49f2308d952c3a853d56e28f6852fe38a23e0f71a16ee9d80875bfcaa7b7e7a5cf536dfdea8f8598ad8b35e12570d73e3fa6f2089b6098ca4fe34c0c57a38ee32d7af0c12584ef0567c0f451783fc1cf47fb48051fc4613c5e3f9e12cf39d6ad555dd3019104c3be78a9c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x33c}, 0x1, 0x0, 0x0, 0x11}, 0x20000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000600), r1)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x88, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xab}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8811}, 0x8000)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='syzkaller\x00', 0xc453, 0x97, &(0x7f0000000400)=""/151, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xa, 0x4, 0x8000}, 0x10}, 0x78)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:43 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5414, 0x20000000)

17:01:43 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7a03}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:43 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="850100006d719d5b21a57b4015719700000000000000008f7f1c5ca0c69f5c11cafbf68f3ddb060287621b82fa0f088088f5ea262751d33cc4d886"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x0, 0x0)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, r3, 0x0, 0xa, &(0x7f0000000040)='syzkaller\x00'}, 0x30)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:43 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2551.645326][T30715] xt_cluster_mt_checkentry: 33 callbacks suppressed
[ 2551.645346][T30715] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2551.657926][T30718] xt_check_match: 8 callbacks suppressed
[ 2551.657943][T30718] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2551.685733][T30713] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:43 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:43 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:43 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x8800}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2551.930566][T30735] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff5eef}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xa, 0x4, 0x7}, 0x10}, 0x78)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="01e3ff000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x401}, [@map={0x18, 0x7, 0x1, 0x0, r2}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x12, &(0x7f0000000100)=""/18, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x5, 0xcb}, 0x10}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2552.036336][T30742] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2552.048472][T30741] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2552.093863][T30748] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2552.113578][T30747] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2552.165800][T30741] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2803]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2552.430134][T30761] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2552.481178][T30763] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:44 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5415, 0x20000000)

17:01:44 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:44 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x8a02}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000040), &(0x7f0000000080)=""/176}, 0x20)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x2e01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2552.683815][T30771] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2552.717686][T30776] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:44 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x3402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2552.743416][T30772] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:44 executing program 2:
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x6, 0x0, 0x2, {0x1, @raw_data="809d662c8285a94d8040004bedf5ec7dc1035b9de103f8114a11f1c07f17486ce1fcda8739e78b90451c5cb843dba0b54073a8c05d50b067047924fb2c8dc85d748e8277477ef3a559908fb3306ce76c93b5932f6402d6e2d9a9c8f0ac6bef1433b62ac41e6c2f003f1584e96f3fdc92c2bdfbbcf8addd035e66cbe6aeb5b4382a4466cfd402ff404220c2c6c7a4fb9b8fddbdf2b922a4af23cea2c80e4b000061da82d3dca3fce9746402b6e34dc3a992f064f4abcc79a6a626074dbe793285164c022408650f44"}, 0x10000})
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="8500c82b9507625f37ac0ba52e"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

[ 2552.804271][T30780] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:44 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9002}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:45 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:45 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x4301]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x65ec}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @map={0x18, 0x9, 0x1, 0x0, r0}, @generic={0x20, 0x9, 0xf, 0x6, 0x800}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x5b, &(0x7f0000000300)=""/91, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x0, 0x9, 0x8}, 0x10}, 0x78)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000040), 0x8)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000040)=0x81, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x800)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000000040), 0x8)
sendmsg$nl_route(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv6_getnexthop={0x24, 0x6a, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)

[ 2553.066418][T30803] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:45 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x4800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:45 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:45 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9003}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:45 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5416, 0x20000000)

17:01:45 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x4c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x800)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f0000000040), 0x8)
getsockname$packet(r2, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='rpc_xdr_overflow\x00', r0}, 0x10)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ppoll(&(0x7f0000000840)=[{r4, 0x4608}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, &(0x7f00000008c0)={[0x8000]}, 0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @local}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="f7ccdd20eddd3396e1ea15c3856c3539afa5f3dc29358b80b9501f1ae0804039489ce824f409943151976801", 0x2c}, {&(0x7f0000000340)="74fce073f84d91b5d741fab240db8b87e5609edb2a4ae9016685abe6b9348c0858af2696a8", 0x25}, {&(0x7f0000000400)="4967b1a93ca0ad6237f42fe6c51943417fda841516f07670b53dceee7ba930041e3ebd2e0b84964c817d2fb9b09cfac02e713141e609945ebf2bc62582acec08ebd93e055b28561e329c9eb59b2440e2f234a158b727a8e4f8c1a0e81130f5392260c154c37a06b2377ebebc2dc48e61258021832469d62ad15549f36188c1022d79765e4edfa1e2345d1ea53b1f63de8a32c44c8b15be6c94fb1860d49646963659749a", 0xa4}, {&(0x7f00000004c0)="8fadde7325561b8ae5e26605ed91cd28a85c5dde21dec59870897910da54fd6b5ff8294e772f5bad28b6059621f0693e4a72daf930b68b96d1863943fd2505e7c09d6b9205ef55a2449e465b92eb0cc4ca9862075d9b9d48684da9b622aa28cd56ac0dddf4fe4a34d9ec7fbd073448d4f4e43a881d426f81c86d1e7084fb974c8ee2d0a700ec021a929f9e222346d3fb4f651ad5897aa3c60862885a208405f895683bc6c2c028da98bda88ea433b9f442e0f8cd", 0xb4}], 0x4, &(0x7f0000000580)=[{0xb0, 0x93, 0x8, "e533b785745f41a66bdbc11107a5664bfa8534457732d25bf2d8257aff27e1dffb9bcd4d1b9d27dbe689079a0733e97ae528d3d4ddcfc3b4fdcfa3f49b076e82a8d524c3894b909337717c4066916264f708d0a2313909e453a48075d1210daff09f93519f42ea2bc913fa7de5f4d5cb80025f8ee4fa98db20e3fe36667c907fac4e7d07a042348b9eb70945af4f0bc4797618e5b5f0c1644027"}, {0xe8, 0x195, 0x3ff, "e8b5890d3c8022ad114c03b319058672c53ebcc08ac344a04e7eb7f2d3995163ffd25ae1b004f5ffd364a42d8e0d6f1454100e50458ed16e5182cd24ff6f52cb45e01b2b3610df92710ab419a8120b4d843d087e383b0f15d11e10fd1630c9f1b74dd1f6dd715f1b78bbd23517978ce08fc8a3375d998075851183ea001fe557c3246b4e39c69182ad487cf9688bd29c507cb8d691639d0e00992dbe6730d66b502b76c1ca4f4f65350aa28c1184e71c71a6cc038f52d8b52d4277ff9b830d3e7e3534d49f08d105325e5b702699170b181dfa78f6b03c"}, {0x18, 0x113, 0x8, '2'}, {0xa8, 0x111, 0x2, "b511b20a43418e114ea0851eede3e95a585a1113771377553054ca3015ca5b8cba295f90402700fbe836b0d939a71d8aec5d02ac78acfe592c1dc934f6f0c256382e2c3d70c39cf343b761909d1bccf1d6452f1a3d2267bb5d2282cfb8855cb9a4bc76861419d5ff65bf2d2201f3d22138199706e4d0cceb4edf3bfc18ebb0af9c385410c4b29d3710b2fadabf3fc334bd72"}], 0x258}, 0x8010)
open(&(0x7f0000000040)='./file0\x00', 0x500, 0x141)

17:01:45 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000050900)=ANY=[@ANYRES64=<r3=>0x0, @ANYBLOB="0410000000000000f1000000010000000100000001000c000010000700000004000000f4730000f7ffffffcc1dd000090000000000000000000000f9a000000000000006000000000000000000000000000000000000000000000000000000000000000000000800"/147])
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r5, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r8}], 0x5, "a59f7995f969f9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x40, "4603beae130363"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r9}], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000509c0)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}], 0x40, "36bce49e27d965"})

17:01:46 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2553.878905][T30834] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2553.942362][T30843] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2553.971580][T30839] hub 9-0:1.0: USB hub found
[ 2553.977949][T30839] hub 9-0:1.0: 8 ports detected
17:01:46 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9103}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:46 executing program 2:
r0 = socket(0x200000000000011, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="850000006d0000009540d897f250c674beb75582e7544290c195de18acd83b7437112798b37bb8c31a0d811b02cd25ed30c240810f392c8fd281da28dd5bea808afdfe73baa95a974355633d73e3f16dfd824aaadbd48cb7b1fa3f5be48717fe5df638461d17ca8ec112a03a1c03589e01"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r3}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:46 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:46 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:46 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x1, 0x1, 0x4, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x236e, 0x100, 0x6, 0x1000, 0x11, "dee5abf91f0d37ca"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x1, 0x1, 0xfffc, 0x4, 0x6})
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:46 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2554.383618][T30874] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:46 executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e7d01"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:46 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5418, 0x20000000)

17:01:46 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9402}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:46 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:46 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:46 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x11)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000040)="f46f47f97edfa31cf072101b7bd00147013559d840a290df0a54ae13f59347ca315bdd31ad2072a3483fa3ce1237b6c0044f9b4edbfb1b35fcd362d5a2ef6c988b88380d329510f89b674ee2ecb241c052b1e5cc76ec32da4575bf3f8e7d85e6be95eaf1413fd69070d1f92f6ab7ead5b7822ac7b09a2f39264e1d0fd2ed49890ec8be459f5b0b11aed596ba436df7481877de9e3500f9622f6795f716f0079060d8cd49", 0x1, 0x0, 0x0, {0x1}}, 0x3)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:47 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2554.976247][T30899] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:47 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0), 0x88000, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xff, 0x0, 0x0, 0xdb}, 0x57)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)={0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18)
r4 = syz_open_pts(r1, 0x4000000000000002)
dup3(r4, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:47 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9a02}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:47 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xaa, &(0x7f0000000180)=""/170, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r1, 0x0, 0xffffffffffffffff, 0x3)
r2 = socket(0x200000000000011, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'tunl0\x00', <r4=>0x0})
bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd27, 0x0, 0x0, 0x0, 0xa46d}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000001}, @map={0x18, 0x0, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x2, 0x9, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1c9}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x2, &(0x7f0000000600)=""/2, 0x41100, 0x19, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x4, 0xcda1, 0x400}, 0x10}, 0x78)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='jbd2_checkpoint_stats\x00', r0}, 0x10)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
r7 = socket(0x5, 0x5, 0xfff)
dup2(r7, r3)
r8 = dup2(r6, r5)
ioctl$FS_IOC_READ_VERITY_METADATA(r8, 0xc0286687, &(0x7f0000000500)={0x1, 0x7, 0x5e, &(0x7f0000000300)=""/94})
connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000000400)={'raw\x00', 0xc4, "081733b34df66a7535fd218c500d4584f164bf98a119f3435dd0c77cef6b7395d57927b17a8b62342c3cd7dcc32a682b353b27f8ffc18a8cb6ca4586ab7ea0048245dee5ab3f2b61feb13f0658ada663f16f7b76a45052ece1fc586d767ef2f01969d19edf1bbb6f22bcb3ff4f638a4f4988bf057f5ab55b9c048c4c959ecad5482185a54746569144ba94d0c8aab3e545957366fcc6ff3f5ca62d207439d8e108a1b306292c333b284aed5cf1588aa801e7ad3d679c3786f334861094a219612c062ea8"}, &(0x7f0000000080)=0xe8)
sendfile(r9, r0, &(0x7f0000000040)=0x8, 0x9)

17:01:47 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:48 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541b, 0x20000000)

17:01:48 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:48 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x9)

17:01:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xaa, &(0x7f0000000040)=""/170, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r0}, 0x10)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=<r2=>0x0)
perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x1, 0x2, 0xb0, 0x0, 0x17, 0x80008, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x4, 0x20}, 0x80a0, 0x4, 0x1, 0x1, 0x51, 0xcca5, 0x0, 0x0, 0x6, 0x0, 0x1}, r2, 0x1, 0xffffffffffffffff, 0x1)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

17:01:48 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:48 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xa401}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:48 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x6c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:48 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000050900)=ANY=[@ANYRES64=<r3=>0x0, @ANYBLOB="0410000000000000f1000000010000000100000001000c000010000700000004000000f4730000f7ffffffcc1dd000090000000000000000000000f9a000000000000006000000000000000000000000000000000000000000000000000000000000000000000800"/147])
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r5, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r8}], 0x5, "a59f7995f969f9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x40, "4603beae130363"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r9}], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000509c0)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}], 0x40, "36bce49e27d965"})

17:01:48 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:48 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xaa01}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:48 executing program 3:
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_vs_stats\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
close(r3)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
write$binfmt_aout(r2, &(0x7f0000000280)={{0xcc, 0x80, 0x3, 0x46, 0x2f5, 0x9, 0x8d, 0x4}, "bd117dabab79a2bb8c53de72b22c3fe84c196055ac3a2ca0faabf13dfcb87c923b63f31dbf6b4bd1fbb75dfcaf6b", ['\x00', '\x00', '\x00', '\x00']}, 0x44e)
r4 = syz_open_pts(r2, 0x4000000000000002)
dup3(r4, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r1}, './file0\x00'})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x0, 0x5}}, './file0\x00'})
write$P9_RATTACH(r1, 0x0, 0x0)

17:01:48 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x7400]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2556.472285][T30990] hub 9-0:1.0: USB hub found
[ 2556.479335][T30990] hub 9-0:1.0: 8 ports detected
17:01:49 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541d, 0x20000000)

17:01:49 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14b]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:49 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xc601}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:49 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x7a00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:49 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x800)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x83, &(0x7f0000000040), 0x8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r3, 0x1)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5, 0x1, '!'}, &(0x7f0000000000)=0x3e2)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0xfff9}, 0x90)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r7 = syz_open_pts(r6, 0x4000000000000002)
dup3(r7, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:49 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000050900)=ANY=[@ANYRES64=<r3=>0x0, @ANYBLOB="0410000000000000f1000000010000000100000001000c000010000700000004000000f4730000f7ffffffcc1dd000090000000000000000000000f9a000000000000006000000000000000000000000000000000000000000000000000000000000000000000800"/147])
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r5, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r8}], 0x5, "a59f7995f969f9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r9=>0x0}], 0x40, "4603beae130363"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r9}], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000509c0)={0x20, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}], 0x40, "36bce49e27d965"})

[ 2557.079962][T31024] xt_cluster_mt_checkentry: 38 callbacks suppressed
[ 2557.079978][T31024] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.138728][T31028] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.142061][T31035] xt_check_match: 6 callbacks suppressed
[ 2557.142078][T31035] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:49 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2557.184958][T31026] hub 9-0:1.0: USB hub found
[ 2557.190632][T31026] hub 9-0:1.0: 8 ports detected
[ 2557.308281][T31038] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.398213][T31052] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:49 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:49 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:49 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1) (fail_nth: 1)

17:01:49 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xca01}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2557.599341][T31064] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2557.619405][T31065] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.644974][T31067] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.666744][T31068] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.670744][T31065] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2557.695462][T31074] FAULT_INJECTION: forcing a failure.
[ 2557.695462][T31074] name failslab, interval 1, probability 0, space 0, times 0
[ 2557.708353][T31074] CPU: 1 PID: 31074 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0
[ 2557.716777][T31074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2557.726823][T31074] Call Trace:
[ 2557.730086][T31074]  <TASK>
[ 2557.733001][T31074]  dump_stack_lvl+0xcd/0x134
[ 2557.737590][T31074]  should_fail.cold+0x5/0xa
[ 2557.742083][T31074]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 2557.747792][T31074]  should_failslab+0x5/0x10
[ 2557.752286][T31074]  __kmalloc+0x72/0x340
[ 2557.756444][T31074]  tomoyo_realpath_from_path+0xc3/0x620
[ 2557.762014][T31074]  ? tomoyo_profile+0x42/0x50
[ 2557.766691][T31074]  tomoyo_path_number_perm+0x1d5/0x590
[ 2557.772138][T31074]  ? tomoyo_path_number_perm+0x18d/0x590
[ 2557.777759][T31074]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 2557.783561][T31074]  ? check_path.constprop.0+0x50/0x50
[ 2557.789109][T31074]  ? lock_downgrade+0x6e0/0x6e0
[ 2557.793959][T31074]  ? __fget_files+0x23d/0x3e0
[ 2557.798631][T31074]  security_file_ioctl+0x50/0xb0
[ 2557.803560][T31074]  __x64_sys_ioctl+0xb3/0x200
[ 2557.808232][T31074]  do_syscall_64+0x35/0xb0
[ 2557.812640][T31074]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2557.818526][T31074] RIP: 0033:0x7f64d9cfaae9
[ 2557.822927][T31074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2557.842527][T31074] RSP: 002b:00007f64d724f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2557.850929][T31074] RAX: ffffffffffffffda RBX: 00007f64d9e0e020 RCX: 00007f64d9cfaae9
[ 2557.858886][T31074] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000003
[ 2557.866846][T31074] RBP: 00007f64d724f1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2557.874803][T31074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2557.882757][T31074] R13: 00007ffc7c1f8caf R14: 00007f64d724f300 R15: 0000000000022000
[ 2557.890728][T31074]  </TASK>
17:01:50 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2557.894605][T31074] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2557.998053][T31078] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:50 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541e, 0x20000000)

17:01:50 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:50 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xe800}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:50 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x9002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:50 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_targets\x00')
write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x11, 0x1, {0x1, 0x3, 0x4}}, 0x14)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0xa7, 0x400, 0xfffffffd, 0xb, "200001004caa273b3ab3312900"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0x8}, 0xc)
sendfile(r3, r1, &(0x7f00000000c0)=0x20, 0x8)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:50 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x9003]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2558.228212][T31089] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2558.241850][T31091] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:50 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xec00}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2558.309035][T31100] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:50 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:50 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:50 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1)

17:01:50 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
fcntl$getownex(r0, 0x10, &(0x7f0000000140))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x111a43, 0x0)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xf8000, 0x1, 0xffffffff, 0x100, 0x19, "9b8c6448acde78626134717829fe8aed154a6f"})
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:50 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x40000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2558.617177][T31118] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:51 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541e, 0x20000000)

17:01:51 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x9402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:51 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:51 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:51 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000018243)
ioctl$TCGETS(r2, 0x5401, &(0x7f0000000000))
r3 = syz_io_uring_complete(0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x82c, 0x800, 0x8, 0x7, 0x5, "e8ecda0773a80ba08c6285a000c95fcb47ddf6"})
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0))
r5 = dup3(r2, r0, 0x0)
ioctl$TCXONC(r5, 0x540a, 0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:51 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x9a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2559.247281][T31146] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:51 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:51 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:51 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x1)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xfb5, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
syz_open_pts(r1, 0x4000000000000002)
r2 = syz_io_uring_complete(0x0)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000))
write(r1, &(0x7f0000000140)="ae30e2aa0a8ba78a30c7a550f9538db7fa47334bc552b376100c662ee1f5f73e9c85b25dc60594ce1f77bf0782b19cddf4edab003c1ae6664a34b4494f8c9e1741dd6e7735d761ba582c5128cc3deb5e74f4d35a3bdeaa44b5111f2f223179172c60f26c289f", 0x66)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x1fb2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x100000000}, r3, 0x3, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x5)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2559.594382][T31171] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:51 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x2, 0x1)

17:01:51 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:51 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x3000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:52 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5421, 0x20000000)

17:01:52 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:52 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:52 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001780)={'batadv_slave_0\x00', <r3=>0x0})
syz_open_pts(r0, 0x105000)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000017c0)={@empty, 0x1f, r3})
dup3(r2, r0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x8000a)

17:01:52 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:52 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xc601]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2560.331718][T31202] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:52 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28d]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:52 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x5000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:52 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x80, 0x2, 0x64, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, 0x10, 0x20, 0x4, 0xc1}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000001c0))
r7 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r7, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0xba, 0x20, 0x4a, 0x0, 0x1, 0x40800, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x1, @perf_config_ext={0x9, 0x6}, 0x4e68, 0x0, 0x6, 0x1, 0x6, 0x80, 0x7fff, 0x0, 0xffffffff}, 0x0, 0x3, r7, 0x51b8b1c9b6895295)
dup2(r4, r5)

[ 2560.658855][T31228] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:52 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x10, 0x1)

17:01:52 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xca01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:52 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x151080, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
sendfile(r0, r1, &(0x7f0000000000)=0x4, 0x9)
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000040), 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x10}, 0xc)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:53 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:53 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:53 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5422, 0x20000000)

17:01:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2cc000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:53 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:53 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0xed00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2561.462961][T31261] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000000))

17:01:53 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:53 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:53 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4c00, 0x1)

17:01:53 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x80, "20000000000034790400"})
syz_open_dev$ptys(0xc, 0x3, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000000c0)={0x8000, 0x10000, 0xffffffff, 0x4, 0x13, "150c3bbf3c14f6630aaf3e842442b4044d51b5"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)

17:01:54 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x11000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:54 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x355]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2562.098741][T31307] xt_cluster_mt_checkentry: 40 callbacks suppressed
[ 2562.098760][T31307] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2562.212723][T31307] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:54 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5423, 0x20000000)

17:01:54 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:54 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:54 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x8000000)
syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000000)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x85831ea7)
r6 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000100)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_setup(0x3c77, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eeb000/0x2000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
syz_io_uring_submit(r7, r10, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x2, 0x3}, 0x3)

17:01:54 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x1f000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2562.516227][T31324] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:54 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2562.564775][T31332] xt_check_match: 4 callbacks suppressed
[ 2562.564797][T31332] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2562.578616][T31326] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:54 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
syz_open_pts(r1, 0x4000000000000002)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)

[ 2562.731065][T31344] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:55 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4c01, 0x1)

17:01:55 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x20000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:55 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:55 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:55 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5424, 0x20000000)

17:01:55 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x3ff, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
flock(r0, 0x4)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:55 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2563.028092][T31361] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2563.040947][T31368] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2563.067747][T31364] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2563.114004][T31376] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2563.140107][T31364] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:55 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x391]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:55 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2563.227467][T31385] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:55 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x21030000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:55 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0xe3)
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000100)={0x1f, 0xd7a, 0xffffffff, 0x0, 0x0, "3fe2cbc812eb95b38aefb618c79b34cd71831f"})
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0xfd, 0x0, 0x8, 0xfc, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbb63aab22961a48f}, 0x8a88, 0x5, 0x0, 0x8, 0x200000000000000, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x8000000000108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x9)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2563.410280][T31392] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2563.475989][T31397] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2563.489725][T31396] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:55 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:56 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5409, 0x1)

17:01:56 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:56 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x28010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:56 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:56 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r1, &(0x7f0000000140)=""/90, 0x5a)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$int_in(r4, 0x5452, &(0x7f00000000c0)=0x10000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {<r5=>r2}}, './file0\x00'})
ioctl$TIOCEXCL(r5, 0x540c)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:56 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5425, 0x20000000)

[ 2563.998633][T31419] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:56 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:56 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:56 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x28030000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:56 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2564.304805][T31445] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2564.367974][T31449] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:56 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:56 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2564.642980][T31466] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2564.670153][T31467] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:01:57 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540b, 0x1)

17:01:57 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x2e010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:57 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:57 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r1 = syz_open_pts(r0, 0x4000000000000002)
dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)

17:01:57 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5427, 0x20000000)

17:01:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:57 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:57 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x34020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:57 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
syz_open_pts(r0, 0x22000)
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:57 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:57 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:58 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540c, 0x1)

17:01:58 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x60]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:58 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x43010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:58 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xb)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = syz_open_pts(r1, 0x4000000000000002)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:01:58 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:58 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5428, 0x20000000)

17:01:58 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:58 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r1 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x3}, r1, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000000c0)={0xeed, 0x7f, 0xfffffff4, 0x9, 0x4, "e2fc39ba6e460397459e182c662118889d2997"})
r2 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r2, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x20, 0xad, 0xdc, 0x0, 0x1b, "d537b9572dac7ff3fe2cce947534570916b07b"})
syz_open_pts(r0, 0x4000000000000002)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)=<r4=>0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xda, 0xe7, 0x1, 0x9, 0x0, 0x6, 0x4040, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000180), 0x9}, 0x40080, 0x40, 0x6, 0x4, 0x69, 0x200, 0x4, 0x0, 0xfffffffa, 0x0, 0x8000}, r4, 0x7, 0xffffffffffffffff, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdir(&(0x7f0000000340)='./bus/file0\x00', 0x0)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="75707065f9a7c8726b646972c660965bf9b531a4a023d2092c21b98b3d2e2f66696c65312c6c6f7765726469723d2e2fa50a0e9dbd02069fb203000000696c653000"])
chdir(&(0x7f00000001c0)='./bus\x00')

17:01:58 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:58 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x48000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2566.348263][T31559] overlayfs: unrecognized mount option "uppeù§ÈrkdirÆ`–[ùµ1¤ #Ò	" or missing value
17:01:58 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:58 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2566.476051][T31569] overlayfs: unrecognized mount option "uppeù§ÈrkdirÆ`–[ùµ1¤ #Ò	" or missing value
17:01:59 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540d, 0x1)

17:01:59 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x4c000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:59 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, "20000000000034790400"})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x3)
r3 = syz_open_pts(r1, 0x4000000000000002)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
sendmsg$TIPC_NL_NET_GET(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x240, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x164, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "49e4ef1a37a6a7e3f47e6089f2b78e94299ed26d725494796eafb90c551a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "3ceb23be44f91f28571d71a5548a133cb280fc518fe68d74babff74bc5ffb3bd4222e00474e3034e463ac153fc890311dcabeaabb180d7c1d79c906906a4f8b0a486ae1730b18fa035506909a80627b484f1580482b9840443d5598a0c4ef84168c043cad3ddf3606e9c0f16c090d4b38007654240926efc1fe07e8371ef5165205ddc4a895787a95e4572a6e3666cb270050ad5029275917ccba139721dd363bfa61564bd3dd2d49309dd5fd53f1e4af833fc70808eb5429ca256f681221bfa27e5141bbb4fea9789dbbf4dd7c4042324fe97508e3fde1fab873e009f44ebff47f780378114f98dc96e3f3264834c7160d464daa9"}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9390, @empty, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3d}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x43}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x31c}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

17:01:59 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:01:59 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:59 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5429, 0x20000000)

[ 2567.122159][T31591] xt_cluster_mt_checkentry: 34 callbacks suppressed
[ 2567.122179][T31591] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:59 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:59 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2567.187088][T31592] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:59 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='V\x00', 0x0, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = syz_open_pts(r2, 0x4000000000000002)
dup3(r3, r1, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r1, 0x0, 0x0)

[ 2567.280428][T31592] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:01:59 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x50000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:59 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:01:59 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2567.428740][T31613] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2567.567296][T31621] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2567.575005][T31626] xt_check_match: 16 callbacks suppressed
[ 2567.575024][T31626] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2567.609220][T31629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2567.627136][T31627] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2567.639407][T31621] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:00 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540e, 0x1)

17:02:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x1, 0x5, 0x53e}})
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:00 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:00 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:00 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x50020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:00 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5437, 0x20000000)

17:02:00 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xed]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2568.167256][T31646] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2568.186030][T31650] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2568.233179][T31653] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2568.252531][T31661] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000010002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2568.352780][T31667] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:00 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:00 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5441, 0x20000000)

17:02:00 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x55000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:00 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2568.633475][T31687] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2568.703949][T31694] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540f, 0x1)

17:02:01 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x12e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:01 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = dup2(r0, 0xffffffffffffffff)
ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000200)={0x2, 0x8, 0x0, 0x8, 0x0, 0x1})
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
finit_module(0xffffffffffffffff, &(0x7f00000000c0)='}\x00', 0x0)
getpeername$unix(r0, &(0x7f0000001280)=@abs, &(0x7f0000001300)=0x6e)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x4, 0xffff, 0x20, 0x400, 0x7, "94870ae4571a4c35"})
r4 = open_tree(r3, &(0x7f0000000140)='.\x00', 0x1900)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000280)={{r4}, "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"})

17:02:01 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x58020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:01 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:01 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x143]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2569.262840][T31711] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:01 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x401, 0xfffffff9, 0x9e, 0x8, 0x6, "e78644b5fdb867bf3a91cf0edcba39a7e42338"})
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:01 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x60000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:01 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:01 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5450, 0x20000000)

17:02:01 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:01 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2569.604289][T31740] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:02 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5410, 0x1)

17:02:02 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x5)
r3 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r3, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:02 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:02 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x68000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:02 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1c6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:02 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1ca]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2570.360050][T31772] mkiss: ax0: crc mode is auto.
[ 2570.370454][T31774] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:02 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2570.435776][T31784] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:02 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x234]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:02 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x68020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:02 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5451, 0x20000000)

17:02:02 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xffffffff, 0xfffffffb, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000083)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:02 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:03 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5411, 0x1)

17:02:03 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:03 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x6c000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:03 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000003c0)={<r4=>0x0, 0x3, 0x7})
ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f00000007c0)={0x1, 0x7f, @start={r4, 0x1, "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", "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"}, [0x5, 0xffffffff, 0x6, 0x10000, 0x100000000, 0x3, 0x5, 0xf64, 0x6, 0x6, 0xffffffffffff768c, 0x2, 0x100, 0x2, 0x4, 0x9, 0x0, 0x200, 0xfff, 0x100000001, 0xad7, 0x40000000000000, 0x7fff, 0x2, 0x6, 0x7ff, 0x26db823d, 0x10000, 0x3, 0x0, 0x7fff, 0x9, 0x3ff, 0x1, 0x7, 0x1f, 0x7441, 0xffffffff80000000, 0x2, 0x7, 0xd5f, 0xc829, 0x8, 0x2, 0xb36, 0x3, 0xfffffffffffffff7, 0x45, 0x20080000, 0x4, 0x6, 0x8, 0x8, 0x9, 0x9, 0x7, 0x0, 0x3fb6, 0x5e9, 0xffffffffffffffaa, 0x9, 0x918, 0x8, 0x9]})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r0, 0x8000000)
ioctl$TCXONC(r0, 0x540a, 0x1)
syz_io_uring_setup(0x552, &(0x7f0000000340), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000eea000/0x2000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000180))
ioctl$FIOCLEX(r2, 0x5451)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x5}, 0x0)
r7 = syz_io_uring_complete(r5)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r7, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x5)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x5, 0xf9, 0x80000001, 0x4, 0xe, "d7dc3ac2f9feeb6d49a7833de072f44210798f"})

17:02:03 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:03 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202200, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)

17:02:03 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:03 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5452, 0x20000000)

17:02:03 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x74000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:03 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x1ff, 0x7f, 0x100})
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:04 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x290]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:04 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7a000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:04 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5412, 0x1)

17:02:04 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2572.363350][T31887] xt_cluster_mt_checkentry: 35 callbacks suppressed
[ 2572.363369][T31887] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:04 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x294]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2572.407414][T31886] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:04 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x101400)
ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000140)=""/214)
r3 = syz_open_pts(r1, 0x4000000000000002)
dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2572.493447][T31886] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:04 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x7a030000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2572.624462][T31903] xt_check_match: 10 callbacks suppressed
[ 2572.624484][T31903] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2572.658442][T31904] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:04 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x545d, 0x20000000)

17:02:04 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x29a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:04 executing program 3:
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = signalfd(r0, &(0x7f0000000000)={[0x5]}, 0x8)
r3 = syz_open_pts(r2, 0x4000000000121002)
dup3(r3, r0, 0x0)
r4 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0)
sendfile(r4, r1, &(0x7f00000001c0)=0xfff, 0x3)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000140))
ioctl$TIOCNXCL(r3, 0x540d)

17:02:04 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2572.833853][T31913] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:05 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2572.905505][T31919] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2572.922159][T31913] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:05 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x88000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2573.000655][T31930] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2573.054693][T31933] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2573.094519][T31935] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2573.187267][T31941] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:05 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5413, 0x1)

17:02:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0xfffffffc, 0x8, 0x0, 0xf, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x8, 0x4, 0x6, 0x5, 0xc, "6fe82ebad09173f481a1dd85374bb54a22290b"})

17:02:05 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x321]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:05 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2573.291199][T31944] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:05 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x8a020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:05 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x328]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2573.390122][T31952] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:05 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5460, 0x20000000)

17:02:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:05 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:05 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x90020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:05 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:06 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x390]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2573.898134][T31985] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:06 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5414, 0x1)

17:02:06 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x90030000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:06 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000011940)={0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, {0xfff}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x5, 0x8000, 0x0, r5}}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xd6c2, {0x0, 0x2, 0x6, 0x2, 0x5, 0xfffffc00, {0x5, 0x7, 0x3, 0x1f, 0x2, 0xfffffffffffffff8, 0xffffffff, 0x1400, 0x0, 0x0, 0x8, r3, r4, 0x7, 0xfffffffd}}}, &(0x7f0000000700)=ANY=[], &(0x7f0000011780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x0, &(0x7f0000011900)={0x20, 0xffffffffffffffda, 0x5, {0x4, 0x0, 0x9c0, 0x3}}})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="1f6eceb1632f3fb6170faa4e0942db57d175bf2927ce19de98244d7c612d78bfa612bb60264ba111bd022de14755ce6ba17a6605d9b3bc65544344065327f475d250f0f9698746e22de35cf6905e47bbb8272de26642b92810dcecc05b7730b3a06cfb5e754cc51dc783e7568d6f8cbe501abd948a8e5dad5199e8d28e242f9f54d8ec51ead948898a46f0a9d7e32805e0ff64a2578f5b543c8103b3dab1a05a41b3ec99210fbcbe708bbe06664194cab93c57d5db91da8971488e605786ab59155e908421a8fc3b7b512a469f57f9d750482f1a4f1150c47382c09c4edc225d560229718b0a4f738a168b97616b99e76eaa97ce3faeeda7542fbaec7133724fd4dbff2cb9e1e8ac0a7e13c671ecf15298027b4da96084ec8316259630d47c73bd15af6373143133ff47d820d7f59412083b4a078fd4f2a88d256014ee86fdafc1f8fcf435fbe2d1f8e54526390fe6179f61e7c365ce184484d17b79869dea8b0d0c34ca5675c23d159fc030262b59a60f1f71d9f755c2654939614935fce8add75763ff79f6d47a3f8b8250feb7881ee294e9779dea19dbed10ed455b2f7045b012b9d6801a9e0b29da34ab38a5de4790401b128ba29209daf5a0ee54f372017e40d299252f16ab76b35ffc580a4f2969fa28873fda1ae4210e085cdb6fb6df6c405cf4650eb5f8fee55b38da4ba76dc3104a9c23b88c4eccbc810c0247d8dd4869b0206e2de4a0a9c4883b2fce0d886d5ac0ed4068d42a644e9979eac14b8745088ed34cbda61c13b1d9c8e2d1be5b43948148c9dc6de598a75440c9535648da952fc456c7e49bf5a143e5d55b71cf4c08963ab61951b7bb30d5055d062406866d124bf2a5842f532f2084bc62f5bc00cd355b9970545b61631c225d9feaffb8ca80982598668067761ba89f036889273d5c3cb2365c28bd8492d577f32c5b6fd28e53ffe3cc47be49067ea3a3ea286cdef420193943afe7169a8f2269587eb38b9e905e50c05a8dc24c2d5de1b2c31b3cd45d2782dc68455f86ee2087aaa402564c13618763a42a11b7df40047596ded0e2b484c063f27a029936e97aa5e920afaa6cace076fcd98ac2e74e9611921aa03e8cb249b755e93725dfc1db2823e7fedee1953ca34f7b8e9439d1e3989bcf7422dee59c82199ed44e28a4042e145e6d060c53184ff7fb243eb5ab623ac4f272646f73436f38cbaf8eb51847ab45aa4c35501c9ec55c35cff647f24e59bc0802bbbbab7791084579c6515939d5b2d1b031a96fcaa454a33a84f417f2b1f33b02d10f6d1741f3a6c88b092e9cb22982233292389407540d02aacce55e0acbbc5796f321172851193ac38d1c8e2ef834a0a84b96dc77594fa846c1ba7c0f689e256596e621b50993ee0b812a468e891a7f3b4d53fcfc1cf3c7b085a5a9a68d39ebcee9fd7a6251b51857130fb04925a898a762ce22cc8dccaeadd1dbc7c136293cc1350e3fea51f2797917dbc19790d2ed3964bcc8f42e0948347dea1105911d10851dbcb021c45e84eb6fa987c305dc2c6988ed9a9581fff90d28734c72f124a80a29c5df661bb47c3140fd8440822da392d39c58e319fd53eabd8326d018a06b3976b8f0c92aaacf49e0093dd59ec497d607795293a5ba1f41a8221794194653f8fa85dcaf3dfbf77a4d476d3a8b896bc728d752b23695e9ad6064a06bff32195ee8ab8a4cc385e30808d209649039cea28999a5477b8139bf7fef114b2ec669fc42bbeb37d9bc6ccaa460a57cc7321ebe8a2e4ca11d7fae97aa8492d0b5c777bced83b025b9a0869d2878d2041660c73ecdcdcac1219abc96fbb6fad9b5049db9c19c12d2b3a3673ed03a344675c2c7cc2086ce9978143ea7d7f98d84b3cca64a61e69831398d8f37540595b507e86923e6a420554bd616632c741e1ea1d6bee0ed48508d10839830f6a3193693a1cf14b60a3cdc3fa677647fd70e165a236c30441d53adcc512233ac98ab49b7167f4dcfb25b4044b93f091bc4a2d8a513e775bba4fc6b317a0847e6ad512bf3864c604c12d4d4ab613aad25af82312dfdedda3a6b478a7ee5239fc6a80fe5164b67697a8770e682937c2bfa562bc56d92f48a4e012aae8df5478b18b8c5c31cdef7136c0c603fda144060e1971198b8ca042e2ca16f4048e50bb8c54737bc52d9fa09f4828b0532bc4b528286829ec16df7bb60e5f51cda5b5e49b289e4f20d56ade8509d146b215bea29f94d4a9ce49b275db3423bd72d6720bfd21d87179e3308f49e5ee2b424013e15ddfdac22eff3b653216107710b632e2972dcbd44c63a7e21af1014dd59bf316a0bbe654f5fcf630423f5f48dcfb91f8f3f416e9fe8485dd0ec0d1181b71585a01ebd9d3d66c79c9d097fd3209ec8a4aeb2a287a7b5d17c6f62553a7e6b2b8731ba331f42509b9176252c79f08828937aaaa9f0055ed090c177924e6188d2d0e122ec7828868184dd216b509a9152dd5d34372cc98a0469fc03a095d068ac36efae2f4dde0a70d7f29849bb9d3bd28e8ea84ed29d2223912c067e54a6d631936c1d66b236ee6b37e2b47fce4f8b16c453248beb13d7900f8054062d719d141bde38c4d413b87752efa43bd5ee288d258e899fc912cf0359b18cffe45857dbfecb4464ed3dde15eff6784e839c54ab9e668daf02c282b7318420eb23280cc7fa29df6cb5724864f33fbec1e2c881c1fd02a53f04da12279c848af28f6ca20d61f788cdc5226c8f92beb6843e4b0f474ddaa5b373a526d0ea83422ad51ff7b42cd022d1c1297d73b26ab8b3e24a01045b7ed5d369b2e41faf47816108b997008c1251b9c04a28ca00d5deca401bb2aa067c79ce35303e05cf53907dab9553d05bf821d610d1dd717a24a0000cc64a71f31d9cff5b406557d024056d1e66ff7580b43d2a80ff9b0ffecc984d09d28cf9d059142c4cc98156d4b26a256551e30742bfaa505159a6cc1a5e817fb4ba66e4a03396fd88f1f2b08abffb047bb00269ee07259b3881dcd4328553fc3f2c3e6294c4127b203f17d81fe4780454b559a0fd20ed104dc3307973926a1507fd846a10adb2c45fc3c9f64d44ddd32d04236beaf74fefdce9753a854fc6c6cabcd3c2cd331410e464557484311c9939634d4d5c2ad852d66298dc240ce4499be08325dd9fade0168764fb95617acc913c09336e673c3a23c9814724d33d75efd772b78fcc53c058a993859bece2f04cf830384a243a170b9cf7dba2d9d3649d495ef87f0e9ba97dc6a259e0dd7ada7e77f2d1a3ae51bc42abdcf6cef6507e5da68f92ef2b5e2d2fdfcf2bd1755fe6af91a55cdbf3458d55d24b0634f51dbbc0f7a3c06476f7d71adb5e0fc91efe164f1d679dd44e63e4dc9261caa32308b7a2b68290f79655f7385aa56e003804a7a2165ed1ceb12ac5b10faa4ebbd4634753dfcc1ef322acd824255440fac7989886a5129f48497287d7183a1ce5f17fb2c1559249f974961901abedcfeb124eaa1f2198d28d1297014dc37a456afd7f9f368e0eebb4eadada15581ac96144f70772a7a87e4ebd0c62535fec583a53235d9512fe073613a6411535f11ecbaec5cce291e5d4ae179919e2c43925445271213c5c3f7e12f0d8adbc316de25ee503a98495fd8ac9a2e05cd2fb3955c498905c25807b4e4f7881bb6e26cb8c3e4f585937f5a71ba541e51e7858aad001b040a002613cabd954c17bbd94d81a59c572c85014c7ffb8864d08a8f74dd833691e0bdd9a8e5bba714dbe2542ea32eea890261ea12b034535c1d6f6d36aa33b98860d7a2f0f2f2be3de768e33657f0126f9c99837e70edd9e72fe32caf26e9e7c474c52ec8ab2d3df47fa79c9c8c5dbe1f6fa62c3bf81501f0fce9ade7f1f553f0e8ed75d842c969f8db841649c9929e301d4558f2e0c0ca1fa289e45d28d5bcc5aff05f612b92b01816b261c55399c17265162b97ee9ff8503822b8a6f766d92758f89b653b307c2277d7d3839bd5761ebaa8489aa9ba8eb43ae10540e91ef432e9f8a07badb297682f6e437f6cfb63f6521992fb3eab58cb3a484f06def5f7cc54731aaac36e8f9013dc70cde45bce3a08c98339a87cf136ccd17b56f7af32d2a1012ae0c460e532fcbce4b512db6ad449d82d06c32090c2d8f6a0139b8293f26eecdad341b2ea363f1b5c6ff3b189b7f359f1f8bea2271703348d9399a741fe2b9c03bf74b85d5758cda90dabb8d9c939769ba8a5e0036c4248ddb936be8e49898b0e554b617a61647293f4c805859e6b1a4352f53ddc0643fc8ecb3586d8d2b55b322ad222eb87a1f4df285cc55f464e0a518965b029e88598360383a2a1bcae8a6f502785d969e052d18595b89bc3c94b12188e1c59fc47541f77da4bad601213893755e8683c558062a1e70d5e74ba1463285099836d9d555d08f3123da9dfa349836e9fe5ccec8da760e399e2448a7d9177e5a4e8112e402003222972d05dde9d8b1ad77a7c029fe8498ce60f7d6aea51039d6e8eeb002c608a015c5470a8ac79bb5358d770781985ee374c9d95d13c1dc495f9600eb583c8197dbca643fe4ec2ec720f4935fe7e732cd883bafd2d2dd1d8427690d25aca77131f81545cf4df5e966770d8214790bb63adce89aebd97c0d1b93e28819df6761e1b4645b37bc37f3732e6bb57f6656c48c9a318bc0a1b7ace9406123499c40b7cd2fca693a4a9801224c26141b21152dac657652976c6439e3ad37af9a984b14f2364d1e80535806dadd91a788bcab57b1679f81ff81ab649dd9b77a3c2fe6509859ebb10a1aa1fff2aa092b484a2bffb3b281366f01def9534aed7ccb13b4d25e2dca861d76ff901c3cbe898483d88a6693745998ba55d17d0d1687118f9660b660eb634d6be49439bcd757552b68a498d1e9d4485e2f4c8c2325ecf3cdc9c90990abb1d25e5189e827a552e48ce5d4b431629a78acb104e4379be8c089f8fae1dacf4903019eac69d5541fbb69492a419d2a1e51fddd5feba02f36c13b68d9636ef8173d4eca31d31acffb23981406806c9f87cca7ef80cdacc8e0d46120170084e6b660362d913cc3fbeec0dc34aa71578dcb9fff6f25ddb6b80ff9b4b9c612011c8ef8aeb48e79302d9008814af04922892bdfe59320f28e36ff34b3125f795e89cd3a79a0f95723a60c6ea0108c682eb4ee50937325602ae534461332d2f5b62bdecc0e060c11ada5763808a865f3e60e9025e2eb408899e0796085a4111d09f1fadc5e125cfb9c7dec6e5c30dd933c69849926403a65c9edfa31f2259d3ccfbbe730162709c29a5cc4113c75a3e188ebf933e54354891a4a3c80e969cead66dfda4238d5b0897c05fcdf97389d0a1bb0b737b40464b40aeb1a66c6d366296159d5a918999395781737b85a9a4b4e2d47552aff2a13916a1bba535f1aace24bd1df6bb9d6b7a1c13f28c7bc94eda03b34b8893e54b2b8a6d1209a684d65a2869c5d1994e8d69ceb39cd88056af3a3fb9b076775bbcf215cb8466f70e22ba5ae7dc0e717d9064e5e43b5668b789ffaaaea4a6ef1258939b847efa9af57debb3398ef38e8959672863f01555c40de386b08c24b3148eaba495c3f0e831c9a9b41058fe37de8c61e194068360bdd5678bc5df17b88c2b036b316ba1c55adc8367eee739f3b2632e56ef436455df2d950be052ae90f0f7b53af1627d7c50ed3d0ab0e086f32765f9047a3cfbf5873d06121bf7795980a53bd9f04178b76f8eefef67ffd221c483e218c614045cf6a6b371335a234d96425b6bb650b048124a3dcf9de1ab47c88133b36bcff473834cfde44e6498b1dbdbaef3da900b2c0b676c76f8437ba27eabd870dc58d8ae3938f03cca5ee5af6f4d376cc21fb08f0dece629c13d85631a78feaf057dbdf8477639744364968d797a6b2173e171686a37823e0614a809c82624d35a707cbdd59c93649fe37eea80e724d2b9538b50f2353e054f90170ffbfc11ae7d965c1587366bc256de575769ddb555418741c486a57b4028a976a1c811ad3dcc0855a2ce116f7eb6c3e061261875dcba33a4a772fe78f7b9cd239ef1c2128f9254f2f7f2b02b9df3c34eb5b73fef970c10355646991ac531c9cd5a8f505ef3b8b7274bb538b2a677a18246357ad070e8793326b6da73bf2fa66b95be326c0137f76487924052cc7f21100f8d0112d86733de9b006e135bd1f288261cd4637f4398997ea5ec1917826bcecbf8b9fc773272c535d4abdf05da14f06f4898a4c8e03da55a23c2dfba9f13ed7814538f906abab3bfa3059af6924a1033f8e3867f23f06d3aa7443b45799ea88d44e3b081f5641701943fb4fd3a717ccd77eaa5d86f81e3e2003c64f7b5c61762ccfe01ed22e48d6a383181539e654fc4f7dec3998097e0094e764019f4cf98990a5bbd21acc6934b20b9d4a8fdaa5269ba9d30e9dccf9968a566753983de70381dad66a853933d34c1ac743bf6f1fb1d421921839d9f70f32bae24e0944972598582bb906f5a7c822848a0918da19544b963c1cfb45ccf02544bd65411de376c9d637d6d73a573c564cf5b13ad0624476576059d15532965c816803f534b4c18db48be63c0cc4008fd95cb7107649d835feac2b29b36dfcbec881d02600d5286b193f45b19a075c79461926dac4a6ba5f94816eb605f2e36fc90e9e95b3b0bfc0fa7d7511f2f2c68a203cb2388f53117392d648ceace02504a847c7f5c1020ec1aaf4767f81010f1cef65626254b2931ebcbad176ae0ecd4d071b5d4b834e2b93f5300377b02005a30d0b4562e9cd960cf3f3f0792298478d7b41e648c7c84d340ef6ffa4d68209b9de36bc4d99aee7c243f4be44ebfa8c47b2d6ecb0a4e5964fb076e631aef53f79896fe5d9a1aeb3a6b22c08798b50d4a9387b757657e12cb5d2f407c0368f44200dd438021356d393eaff30fb266ad7685906d5ed6ebbbdb77450d11ad4aa9700ee2dbb1f920a5cb692a3c771ae807f531b04c332299aad2fe205bbb3bce6d969650474cb8cb9310b92da52c528e280807e72e019ebc49e8a71c207e2f4eea3ea51ffcbbdbe36118c073272af9b8adc244bb2b4d9f47b139d12594970faff3d6fc299a46944c7f6974bf7827959d7a34b49eb0f54a02b34d856b5c07c21e908fda7b68482ed868ebacc5d22427e84cb79e6c162de4d72a2e548fb1246bb93b18a89cb148d60949fcbdf6b7df8c214a30d802db218ae10dbb6a361c6ed8dc19e0f60c710d305a034143be90ff0b0af8a27de8b0e32d22b3f59618547d4e3c002df46820b501c7d7dd689e091d4bacd199b88606c76e916d7ad6a5585692ffab6f12f9cc5440d2090df498d8aaa11e3dc51e23c37ffb7b7a3b5e24caabd1976a204de241d9e4c7ee5436cff01007fad0b1e26cb4591af0382074268b18d1c6539cd762fadb07c2f3af6ebcb935c148a4b245255f500717fc3c618ed6e7e739b1ab68002c32a23cdb0114a3d82fddef7be06f192bfa43e6d320fd791a91c81b550ea6470c5d3fb5a8bc95ac56cc66f0559d20c454c3732ac478838426e1534440eebb598faf1325fe534bb91cabe26e0985ad150c0d58f6e554ac056eafff9d1319272e38f06cb412f977075d775fb5a0fa52abd129321313429443e61bf11b552983223edf8ff6838324d51ff696c2a4e7d212dcbd3186ab28bcc89846857c387f7d144ad0625d0d91aa228997064bb4169c81c4d6a2aa46f405530be38a0515d66c1c715d9ae6b5e56e1eac5350ded20db80549b74807833b83773c03890c4ce18f25ecd58e883966c077263d8f8f4cd92d34b1d1c6c39e7af46bce56807ab8a3a520e74880acd365669df5e1cfff3ef35ba4434edc5d0fc931706f13fe3b760240a655e4c5e7078c4e92a56d2ff0236cf5c458ab19899e5fc8b61a760b512efabd1d8020b6e44394ebaabf10a9f1169599e6a71ee6d45fcf78e0501c5be63505af376ba059d8505a14243d044d69d1d7b7d82372f31ff1a854d30f1f85f0357b65caf40001aafec00876681df44dc2e385994023b6aa14d802e5f98bafd1eb4d74836ba2b67b83692f74a81477cfad00725845d5b1700877d7c6916263203cba130d8ef520a5eb8ab2a65206ee72b783cf1cff9e805eec5bfdb28bfa9f610cd675e8ba4b7f2fd4ebd99c9487a05a95f56795fd5b76fbf3000c18cdc92d2aee5fd2e99902a3cfd18303cd167f74ce3fd6d778a0d2b3fae8218a2139d7793a2f7cd5ad7e2806baa146893190770ecefd586ef4ff60d4fe078ba2d9bb8733738cfadff0af606e1d38fd1c71fbebcea01374200c7d8748a310a513b282a64a5bac7ea5b619495bc1d5747351102e0bc7c6941ecb31bf872d095dd33eb6051fa278782ec4356328abdc8744bbaf761feb9d563fba8e772ac61382442f57cb62452c7e4d15486349a50d60911f81ebe9b95788628090c4a9abd03f6e8e24a7a19ad8d43ebb48a289d4698f7f253de118041a8f65f436c11833e88fce98c2532243ac3ab60dfc7f9513d201211db922cd3458def942a5ebd21a4891b461e319f3e8da1319b2666fa8848dad2295bfd414e1317ae197c03baceac3d6e61fb0a0748aa49be358c63bc969d0464026849aa65b47e7721f54b63f99f634cdc53519735bb08c8e5bda8de90e64d7f2d9073b06705caa3f81c266340c883d68dad87c568753b8a51754fe341c08774319945295795ef822e904f5965b8b16e4d2750e5971ca074a64aff7968eb957f0789be5f5330f7e3c876f4eecc70ba54d6f31aac73ee65a73cfeb355b7e6aff2cf33001cc78dab664e4342f37a9748640e13bddd22ebef6cfde20fa9d0a05f4639b826211737290bc522e4bb27b8cce628e34c3d14d8f705a69f4386c16f3f0f636b6b690e53731d40621a329b9fbd4f72a995904a881dd6254f56c67657368066c765ae9a0f95c7b5f8827dfa0fc6563c3f812f441ab5488608ce0e19875868d4826af233c1e63a8e2e7568aa5b5de08cc11140ba321bdc03c6ac3d60485cfc1524ce574194128127ba74179ec1e70f0c0a23455f4d02f93c8947636059f9c0a7f5a5d4a965e2b2145fa18f91c4d82987ce11d8cc4f63495a1111ba047921448854973dd56da290c39d584f5ae0a6c21bbffcf59723ddf6edbe7dd6c25c42827395af05adab30666f14723e87c137ea1bf998a6d68f7807c8e3d8fe11d1df7e7510f3795a8b2cdc1f18db8279667d92319a0a20489eb9154e1c556f79f02d17a01f444af7ea3cf3ad8d12f0e8f9948205df2190bbd6374571c796b48271a8cf4891673125c30f46e0319af083794d1f62b0427f5c2852807b3f2120c49306b8aa1a500270ed10148bf319524da18342f4f9b48e2cf66d461a5628c6a5cb6e6ebb1fede4854822b0076283cee2ea63a31a47c40de5e2c6ada88db4fc607994116a094b725976fb1c75404316109ec75bbbb2fcee7ef324173f771b382d9628db92d179768d4ac7853fa5740a5967c5fe98daebcdf8dd35884d6c7ce836a760d3528e6f64fb62c6d6131421be9e4533d02ffb5b177ae83582dbbef8b4ff0e3569846023f03bc612a698173d3eb7c3402da5c6f68b96fbffd3271f92446d0fe6841beff95e513f82818c430b21e03344030abacbb8385c9278f261e3c9d697eb64b505fbe91e673c8688b4ba114ccad5b6e2066e891c152f0c29f0da6a90e3bf87d889d159b6853318a260fb48d890792f9cf65865da68f2b6b3cf79dac28cb0e7ad6063c2e19f14ada83489c365631ae01851af386da31f47ff5d28f925196aca6a80f55f1c7aa97ba62b0baf0c27cfd050ec38908c0ebf8224444e5d9d68069bdd25a42fb0652eb346b4e0c5948a76b59da31134a9a827ca4bece3d552b664db2367312c610a5f5d42c2841ba91db66cde76d4cfb1fd5b03605b7781179805dac5d5cf047d5c9b49e17c4e8a79d838bd389539ef3f9e106cb8a9d141b7d907c8813d03ccf9388bc3707f6eec2513d1014418e590812f3670400919cd7d22b5b798bac0796469c2018d64a06a8a0e82075e4eabd279966f046961b3cce22b494ac7d67fc91549f24f25057254d10d75f121e2aa1af8709a8235f8cf743805a8194fe1404f50165ca044c6bf62d4560eb6c7cff01e9819e586743fe90b340e3262718082d5fb7ce90078994dac737339cd7aadff51876ffa25bbc74bcf4213df79eaa1eea97d9c234b753e979cfe21aafa9591b3d0261dab48096e7a869002f931d58b88977ccb582e2dcebac6bfb6597e23e774160f27b807ebf6bfe5943e2e20752ae82e46ac1ad143a4718820def3c18dc1c34ef8a274dac1fcb47b20a1b3ca8eb10cc63a06234f122cb32ba97dd7a0a26d0afca92fc0d930ed68a59386e72490b47ce1f348064a8461c7b813b0f2e5b3f4d23a6199eb9ec085199f79c0780667813ee7998b3d071ca6a06b8f2358ee10be6216c4151c196eb849df64b79291e11b41fb5a7af226c64019afa87d09b3d41b9979ace28f4e01278f96f9c0bbc4bbc3b80f86d49f6e3b2f5035d609c51568e0099eea2b8812f05304dd8f33fb11574c06b5d6bb889d85b6102360bb427b704307c9116f53d71aef195928af08585bf85395703acb547d9231e0e9abe2118384c3f53a9c13588b56c8dfdf2a80c4fe18469191b9a35f32f6a6cb0c640e7f0daeba743c052e3e1692010ef0267ad1e631f173b32755ba8ea2c248059757516ea0e5b66f61d16f3bf60206e10d59fa08d49a6b07098c039cb40812c24af2c59b64832edf4e4b66a5fce3df51188bb7ba83f94f97fce3cc1a0e109277b17db09ba0717e85a9f7f5b0eee8574497ebda2b148a5b4e50d98d99dda46ff335b8d6aac7acc32b91ea3230df0d97d25d34a26e9494fee26ee41cb3a1921aa47bc71913679531a5f5d908cfeefc33611f548cebe8aa1fe8dc7aae1762a8d5eb05251df40167ff26713dbd95552b492909d5925cb19257e06e10979dda51edb03765cf274b17ecae55c13f94669e66ee1c0e54910559bf71249c8bf1d8023c5318f7fb71fe6ace008cdf5e267ec5e8deebdef921fb5738115f50a47dad2eff2f9b2110629a0218905f6f5f290928524bffc92cdcf6386281c78fff3df6bcc1bc3b8c7ce27debaa93bf1178fa5b999c50f16a68f08392c9daf9208f0a168403be45da18797dd1f1f10bd7a5c9cf8930342b7c0c62a767ab85a9f90a22641992d51c388e483510348b0f2a097a018238f5da5a488b26a89f0b31db6f93f8982147c443e89640cff697ce0da4a1cd410bdb1d812e9a514e2ebde2fcf6af6f5a8c56ba0e654a4dfe6f3504f6e96661420c8c7d96073835fdc179189704fdaf05d3c632bca9adf62a3f3a6fbc12bf2c714bad6bfc2192df5b9dc14dc3fc6fe59c7570b33176359ba344eafa368ddff5b692704f2a4f4878b44189892a651437a226a421674e3c28c569a864366b93970657af38f37c08b62f72535bb3ecf25aea12fe2e104cb1a0eb73ff94201a5506d69cec3dff8b95290e7c64361e446ea027a6015e717716aaf8cfcf093736210b25752a3816c0496af1851847c665478b178fc78c7ceaad485ed60c56183500246afb9f2e164062e3a1183d00", 0x2000, &(0x7f0000011940)={0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x1, {0xfff}}, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x4}}, &(0x7f00000003c0)={0x28, 0x0, 0x3, {{0x5, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0xfffffffffffffffe, 0xc}, 0x0, &(0x7f0000000640)={0x90, 0x0, 0xd6c2, {0x0, 0x2, 0x6, 0x2, 0x5, 0xfffffc00, {0x1, 0x7, 0x3, 0x1f, 0x2, 0xfffffffffffffff8, 0xfffdffff, 0x1400, 0x0, 0x0, 0x8, r7, r8, 0x7, 0xfffffffd}}}, &(0x7f0000000700)=ANY=[], &(0x7f0000000400)=ANY=[@ANYBLOB="c38aeddc8e5073623a4a5c9a095b86395449e1b0a4343dd075c87edfa8f35afc607c4979e23cbb46b6f8071d850a1420226ff766e7f802cce9153fb4791b5dba6d86d769894d8b7d3cab1f085c431db2c93eecbd2c5cc137830d70f13f39b96848c35c72fe38c99919b0484cf6f4b8af0acaf9fe0136bc54b87e4453ac54e58d53fd3d60802da3", @ANYRESOCT, @ANYBLOB, @ANYBLOB="82f629d03c0ed0b40a0b355e8671d58a9e099c1652e52e56faadff19288569012dafe64a4acbe24af9"], 0x0, &(0x7f0000011900)={0x20, 0xffffffffffffffda, 0x2, {0x6, 0x4, 0x9c0, 0x5}}})
fchown(r6, 0xee01, r8)
write$P9_RSTATu(r0, &(0x7f0000000140)={0x5f, 0x7d, 0x2, {{0x0, 0x40, 0x401, 0xffffffff, {0x4, 0x4, 0x5}, 0x0, 0x1ff, 0xfffffff7, 0xe6a4, 0x5, 'stat\x00', 0x5, 'stat\x00', 0x0, '', 0x3, '@\\('}, 0xa, '/dev/ptmx\x00', r3, r8, 0xffffffffffffffff}}, 0x5f)
r10 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r10, 0x0, 0xffffffffffffffff, 0x3)
ioctl$DRM_IOCTL_MODE_SETPLANE(r10, 0xc03064b7, &(0x7f00000000c0)={0x0, 0x900000, 0xc95, 0x8, 0x1, 0xff, 0x4, 0x200, 0x5b, 0x3, 0x92, 0xffffffff})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3)

17:02:06 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:06 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x391]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:06 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2574.369457][T32013] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2574.430636][T32023] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:06 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5501, 0x20000000)

17:02:06 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x91030000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:06 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:06 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:07 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2574.957284][T32045] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:07 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x94020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:07 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5415, 0x1)

17:02:07 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:07 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:07 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x9a020000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2575.432422][T32073] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2575.493865][T32082] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:07 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:07 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5509, 0x20000000)

17:02:08 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xa4010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:08 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:08 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5416, 0x1)

17:02:08 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xaa010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:08 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:08 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:08 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:09 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2803]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:09 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xc6010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:09 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x6364, 0x20000000)

17:02:09 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:09 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000062d40)={0x0, ""/256, 0x0, <r5=>0x0})
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r7, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, <r8=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r9=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, <r10=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000000440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r10}], 0x5, "a59f7995f969f9"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b740)={0x7ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}], 0x40, "4603beae130363"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c740)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r11}], 0x23, "148122525ec587"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000062f40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r8}], 0x4, "34e63433b34f29"})

17:02:09 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2e01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2577.071171][T32163] hub 9-0:1.0: USB hub found
[ 2577.078497][T32163] hub 9-0:1.0: 8 ports detected
17:02:09 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:09 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:09 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5418, 0x1)

17:02:09 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xca010000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:09 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000040), 0x8)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000140)="bb9b8c4b4fa2578f9a23908745b5b57fb76c5684610ecfad32d7813da5d68efc3fec07abb78686eb22a8abc393ad4ec44ab453e13bd034ddea30ddcfd81eb3575e54fe15c0bbe7c696777810a2cb50ba3fadc27bb8d95e9cb99dd35399eca0cefcba6a323232ba2fbe76c8e9644dc7bd821f52f9b1d48e35aa5efe25680910f247d0a4c0007d479c3b28b8635438b6dd826bad003391c2c0818db745d78f6bcaf44f2fb1af7936b71262699bdb3096f66bc8b63fcb8e94337623b2ae3309816d85bb0bf2b9393bb9", 0xc8)
sendto$inet(r0, &(0x7f0000000280)="9757cd9b4238ac9d61c013e7ed718f55d07bb381689051a013a3f08b13a7b21bbbf96a8c1edff2515ef2f83a2b71e5b5bb409f6191b2a81e5089ee2e577388b5969eac48a48cd27449956c51d65fb4438485cdfb574aeb3f4ac06f99c718b27876ecfb96f6008db9937a6dc0200d016d12c5101011568b0151313a102d8c3a24aa76db65809876dc7da0c1e4e5e0798ff9fcc03e98bd", 0x96, 0x81, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)

[ 2577.515002][T32194] xt_cluster_mt_checkentry: 46 callbacks suppressed
[ 2577.515021][T32194] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:09 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4301]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:09 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x711201, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0xd, 0x81, 0x3, 0x3, 0x13, "0800054ec3391c40c923a914e571d4a11d5c53"})
r3 = syz_open_pts(r1, 0x4000000000000002)
r4 = syz_io_uring_complete(0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r5=>0x0}, &(0x7f0000000240)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r6=>0x0}, &(0x7f00000002c0)=0xc)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x129000, 0x0)
r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x103140, 0x182, 0x4}, 0x18)
kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f0000000440)={r0, r8, 0x50})
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x3)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0xaf)
dup3(r3, r0, 0x0)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000180)={0x40, 0x7f, 0xffffffff, 0x100, 0x76, "66c779615ca9e2205f4705c2b9abdfe838748a", 0x2, 0x1})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2577.582675][T32196] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:09 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2577.677114][T32196] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2577.759816][T32216] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2577.772377][T32217] xt_check_match: 14 callbacks suppressed
[ 2577.772397][T32217] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2577.874168][T32224] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:10 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x8913, 0x20000000)

17:02:10 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xe8000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:10 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:10 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0)
r3 = syz_open_pts(r1, 0x4000000000000002)
r4 = dup3(r3, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r5 = syz_io_uring_complete(0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x498100, 0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
write$P9_RATTACH(r4, 0x0, 0x0)

17:02:10 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:10 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2578.100999][T32229] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2578.105215][T32232] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2578.136070][T32241] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:10 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x800)
accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x40, 0x0, 0x7f, 0x8, 0x80, 0x7ff, 0x4}, 0x20)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r3 = open(&(0x7f0000004fc0)='./file0\x00', 0x400000, 0x10)
bind$inet(r3, &(0x7f0000005000)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = syz_open_pts(r2, 0x4000000000000002)
dup3(r4, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r5 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004700)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/193, 0xc1}], 0x0, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/229, 0xe5}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000001c00)=""/20, 0x14}, {&(0x7f0000000780)=""/247, 0xf7}], 0x4, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/201, 0xd0}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x3, &(0x7f0000001c00)}}, {{&(0x7f0000001c40), 0x6e, &(0x7f0000003180)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/25, 0x19}, {&(0x7f0000002d00)=""/27, 0x1b}, {&(0x7f0000002d40)=""/231, 0xe7}, {&(0x7f0000002e40)=""/239, 0xef}, {&(0x7f0000002f40)=""/97, 0x61}, {&(0x7f0000002fc0)=""/230, 0xe6}, {&(0x7f00000030c0)=""/146, 0x92}], 0x8, &(0x7f0000003200)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003280), 0x6e, &(0x7f00000045c0)=[{&(0x7f0000003300)=""/219, 0xdb}, {&(0x7f0000003400)=""/148, 0x94}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/83, 0x53}, {&(0x7f0000004540)=""/65, 0x41}], 0x5, &(0x7f0000004880)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=<r7=>0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xa0}}], 0x5, 0x40000002, &(0x7f0000004840))
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)
write$P9_RATTACH(r7, 0x0, 0x0)

[ 2578.180856][T32245] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2578.281621][T32250] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:10 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541b, 0x1)

17:02:10 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0xec000000}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:10 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14b]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:10 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:10 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x800, 0x0, 0x0, "20000000000034790400"})
syz_open_pts(r1, 0x4000000000000002)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0)
r3 = dup3(r2, r0, 0x80000)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x1, 0x83, 0x7, 0xc61, 0xc, "6f1ae3e8f43377ed01a89a6e15e8a4ce66303e"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0, {r3}}, './file0\x00'})
write$P9_RWALK(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="300000006f010003000200800000000000000000080000000000000010020000000100"/48], 0x30)

[ 2578.555056][T32266] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2578.590503][T32269] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2578.619598][T32268] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2578.633715][T32274] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2578.689328][T32268] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:11 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:11 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x8914, 0x20000000)

17:02:11 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:11 executing program 3:
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x241, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x17)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:11 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:11 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2579.132883][T32299] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:11 executing program 3:
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "8ede96bb128119f25dc566c9821d9781"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x54}, @NL80211_ATTR_PMK={0x14, 0xfe, "f68f74ca7b05fb39807c0787785b1362"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3ff}, @NL80211_ATTR_MAC={0xa, 0x6, @random="41b705bf55ed"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_PMK={0x14, 0xfe, "adbed4d42c95492f1be24beb6be560d2"}]}, 0x78}, 0x1, 0x0, 0x0, 0x4044001}, 0x24040891)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000004c0)=0x7)
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000280)={0xe1, "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"})
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:11 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541d, 0x1)

17:02:11 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:11 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:11 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:11 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000280))
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
r4 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x2, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r4, 0x0, 0xffffffffffffffff, 0x10)
r5 = syz_io_uring_complete(0x0)
perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffc01, 0x0, 0x108}, r5, 0x0, 0xffffffffffffffff, 0x3)
write$P9_RATTACH(r5, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x20, 0x3, 0x6, 0x81, 0x0, 0x1, 0x4045, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x5002, 0xffff, 0x1, 0x3, 0x7, 0x99f, 0x5, 0x0, 0x3, 0x0, 0x1}, r6, 0x3, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x8, 0x5, 0x8, 0x5, 0x0, 0x268017a8, 0x800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x0, 0x399, 0x81, 0x0, 0x81, 0x567, 0xa436, 0x0, 0x7, 0x0, 0x7}, r6, 0x6, 0xffffffffffffffff, 0xa)

17:02:11 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2579.582265][T32329] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:12 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x8933, 0x20000000)

17:02:12 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x3}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:12 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
r3 = signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8)
ioctl$TIOCMBIS(r3, 0x5416, &(0x7f00000000c0)=0x1)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:12 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:12 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:12 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2580.111345][T32357] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:12 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541e, 0x1)

17:02:12 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
dup3(0xffffffffffffffff, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:12 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:12 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:12 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:12 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7400]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2580.547781][T32389] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:13 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x89e2, 0x20000000)

17:02:13 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:13 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$inet(0xa, 0x800, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x83, &(0x7f0000000040), 0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x7, 0x0, 0xc1, 0x24, 0x1000, 0x5, 0x2, <r5=>0x0}, &(0x7f0000000140)=0x20)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000180)={r5, 0xe2, 0x2, 0x1, 0x1, 0xfffffff8}, &(0x7f00000001c0)=0x14)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
finit_module(r1, &(0x7f00000002c0)='yet/dev_snmp6\x00/\xa0\xc0\xab5z\xa0*7\xc9\xbfy\xe4v\x84\xc6\xceh\x8474\x96\xa8\xa4F\x8c\xe7\x1d\"\xe2\x91:\xef\a\xb78\x93\xef\xea\xb3_\xd6\x0e\xd5\x91\x8f@\x86\xb6Y\xab%\bu\x01\xdd\x0f\x89\xd2[#g\xbe\xa92\xb8\x88\xb5\xe6z\xb2n\xb51\xa7B\xfe\r\b\xba\xf4\x9e\xab', 0x4)
r6 = syz_open_pts(r1, 0x4000000000000002)
r7 = dup3(r6, r0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
dup2(r7, r7)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:13 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:13 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:13 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:13 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x541e, 0x1)

17:02:13 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:13 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:13 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:13 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x800)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@private0, 0x0, 0x0, 0xff}, 0x20)
r6 = accept4(r3, 0x0, 0x0, 0x800)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x83, &(0x7f0000000040), 0x8)
getresuid(&(0x7f00000000c0), &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000180))
sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000200000042cbd7000fddbdf250a200002ff00000001000000080017004e204e2014000100fe8000000000000000000000000000aa14000200000000000000000000000000000000010c001400", @ANYRES32=r7, @ANYRES32=0xee01, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:13 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:14 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x400448c9, 0x20000000)

17:02:14 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28d]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:14 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:14 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$dsp(r3, &(0x7f00000000c0)=""/39, 0x27)

17:02:14 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:14 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9003]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:14 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5421, 0x1)

17:02:14 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:14 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x11}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:14 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:14 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x1ff}, 0x0, 0x0, 0x0, 0x6, 0x200, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001000)={<r2=>0x0, ""/256, 0x0, <r3=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r4=>0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000})
ioctl$USBDEVFS_IOCTL(r5, 0x8108551b, &(0x7f0000000380))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, <r6=>0x0, <r7=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005a900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0xfd, "d4c90300"})
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002340)={&(0x7f0000002100)=ANY=[@ANYRES64=r2, @ANYRES64=r4, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRESOCT, @ANYRESDEC=r3, @ANYRESHEX=r1], 0x3}, 0x1, 0x0, 0x0, 0x4000010}, 0x40025)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000000)={{r0}, r4, 0x0, @unused=[0x0, 0x80, 0x8e9, 0x7], @subvolid})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000280)={{}, r4, 0x0, @unused=[0x9f1, 0x6, 0x1, 0x401], @name="31b6640dc7caf393b25b34722fb1af6c57998ba58642dcdbe9b97e14eb8b1073a2e2f4faece8d6c86fb5e46b4f6c505b1893cf8c092889723a8a4d1ca0e7c2b5eb6f27e1c64df175964c5cab525d24bcc71aa593364ffc646519494a0718aeef6b3b4fd10fea1d6bf6039a35fe4a08fd56f6c8ed3b521569a5448f4a59b21ae16c728e80d52366ba6309b810e0d07951863c2b6bf8fd7263cd7889a3b344eb625d00cbb1d9e2a0f2e842f3b427229134245886dc11017e18f9286944e82df48cb9f16fee74ae0bd24bfab47b62ac2e4c494d346748216ccf6d84f31e8fd89b17bc1bab5bf6ea914e4244672afbc25c9a6f4da16036aa949fb1e24ea50932558c0f94fc403aa3a597e55892490373217d12722e772340adde8da65643e2f3f1cde11b041985b126774484a43bcc121b099193fa415ec4094a9fe4dfa537c94a9e6b73047c1a7cca4f9dfd5473918d53cc1954be5c4f940f4e682888aff59e3aa2425525f31424fd71549c02cc51357724a13fb16c4c2c080c6521e709a68bfd2a304780c44495b70784f1cb6e5cdda019172f115b52649ae7935bdf8892d5488040ca0af134093b2c3c27b0570dfc84159c4fbe22d0fc5d09ef0a384fc1d6d112c0680b7d35beb00748fa672fc4e2db24d36eb17ffea2c5251ee2e2a7d777e7f12328ef361274cea479a3bd11972bf9b826440ff28b27ce559047a927cbfff2782684e297553578b75471d6621ffc7a5e3e2f1cd3d890b97b7e5f307f651260926c89feb06ed13d64a6c9f16803eaff4f633f061a09d693d855160571f0effa263366616b7a697fb4cf4a1fba014309636ec45752c48f04db7989299c4ec0fa84827e6185274227c2a99d9bb760a40b923bcefbac36f000e62ad3b1ee5762a81906963a9d5422f578c14a8c3775f6e715bdffd389eccd07f291d20e6b561f928b893f11d7a843da3133ef0631e5b692109ae55e4041306ea1468572b86fbbebf050ec20cd0ced67530c89403699c9d42809895546cf4b27554cd744c0e2dec4479662ef87a3645d292ed6f3c37751c96d2e4e93e73385d89b1d02467056828d57b9f1f6e9d42b1ab69883fbd0495c3317d0ac60f399d34d72dfbeb6bf9014893450ad1d9181e362047532da932c945eaadfa0f147d2daa0abe899e880409e02bc6b0e9afc049b25d51dbc4100344c8a6973d5c797150f0931961df028ed57cf19f76b0592f66927e9330cd32c0f703d0df6b0f685c6d421b56800e07eaa5272ecad40e7815d5d68446bcf0e7d00736c3aac01d799615e6d945da1efc400c0955388c17cee06b61da5efe6459ff8a9ebacdf479b606cb8924359bb9ffccf2058d465c0d973653fa2c33d4951c3ede6e08d2f01586dfa15f9cc74f493e6c196f3046f894d99db8652ac471746a19e82f8dc77a7bd41ec3e4cf0840d5f8598c0d109383840c8f06fb214c3cd59536dda972aa67714c6e531340ac1d0d3bda61a6ef47fdb2996b249db956c47ee7aa26b385da2022d1b34470980e758dab20a138581d2ced604bba07f194ea6aa80ac3a5728017b002624d3f1b51dc6e30cff27c4b0ee556d1ccd8ec65ea36c800f2568b60d48143edd22afe5a549648b393f7002aa96f56164560338c77e5968e368aaa1d52bb45af157f135bd5b7041ff6dfb99a0a00e6d5102e1123cdf7c5bf1070a240417e014417e0a92962f19829360f22e6e2a41cdc3a3937a3ce0f473ffa1dab294a3606d0f636525cd96ef38a9259600e7236a9fad90ef8dbb17012b09dda9abb10443133967e379e37e55839dc0300e811b887e6584c76f7fe08b3f453c2ad06cef967881f95e10f89a3586c90f58cbe816c74421b44d85419402066c877a42787dd422f9e1d99f276db108d05966b2cebf9289d08091703757da1c5104d381b3d066b60a89943c9c1b941601033a91101af764d5513f89893919972d68323e945d4f4906ef1a01a61d592c1024ae9c06bb66a6c0c184b45ad824f7b8cd9d1be14a873c333ff6af216167daa9826a660de3c6b15f8c7dc7537a9d71754bf8650c7567a582600b12a85ad0a54948d7231b6f1c720aaaa5f4c5a2024692039e00251f20c69397c448e33cc1731e5113c760d48ae1cb6cccaa919da56c381c92d0ade8fa03010bfd84eb5c06c62cc973fc347280311af0848869cac3f57b47acddeec9b7e9eb1e170ac83b7f870e6595ff362cc809ddc19b214d42ebf874b0efe6faea6f343e36ad1afa3527e9c8037b7fb201cb6dfe7f3385e63fb452a65351422a767cd3750ecd82f545b660b412d5ddb9eb102fa6793ba8ff6a75e883db9b6438872ebe4a07864a4b590cd73d47d726bd7086e5fb50cab06eed0bd3ce7b5c0b3f08e881da07ca059bb3b2d702cc521feeb0218bf8d4be0ffdc70be786e4d9936888e4ecd5327d33e51a5da9709c10a95362e3837211276ab515dae0cab1ffe56b30aefa95ba8f4b3e2a2e3b85030548961a80851c97d08cc73ca5a4dbc8f3e8f3142f7b39bca28a0501dea4da33b53270bb554c06e21d3a6468b8f8ce36ed77131587c1b024821ab7824c56556e761a072f967a8d7e9953eabdae7f28e91829a3969ad86d43e669b83c7a941e0ab0d60965891cc52ec46931fc6130c771af2c83f51405d4e1f917043bc25213d661d35eb3f5e2583d7d4d638084fc9cdfe342cc4f6492290489344234f03ef8dca7837affcc4f72978cc7de4d5f795eb88a4fa491937fc7d4eff21e1ff5dc2c352e2bcad192b9026c78025c76cf04dbd54d06ef54662c148c105b2b92de0ceac076e9ad5fedba3e15bb066cffb18b12a3daa406a3abe9738d12ce870e41eb04794d05a0d1d66ebb196eea246222e608221ee7931e57b4c41246f1ed2e174f27462f01ccbac68e08b684f604a27254f0d298c2a7d861d8ad12f5c695340e0141a55a09e73087916c561948bdb9c8df5af36e9b3928f52a1151c77c8fab30ccd13cb179fe2d78654539ed78065ea9b3b0b0db5ebf04698b28c2b3afc538c38dfa3a6de39e04272ef5586962e1c7303d9abfb34f9c159de0006f474688e308936132df196e95594253c526d7762e2d64efe7c3a16de9340b8620b187fd0536277cda383d516fff91fffa5ad531d3729b307e7758a146a407c8cfee6d4713d78417b0b207f200840da5503510c5a07b61e88524ae71dc1d37c1c45f075f79d6efd3eaca98148d88a73a3e3e80bb93e1106661848d0e8953b176861f0a9ed73924b25b420c98b4a94f89822244b8f9169e3400d9978ab1a79cc085ea6a10624ce3f1007cec248b5bd4e9d57caadb7014d8b2408bc63a962b1c4cfca15772ecf54ee2603c05b5baad12c1e2de8fb935500c95c424a58e2da9b122e8c4f379e50284e766e34c1915516f6e46fd17187d3091c4e8b281f926c5d753787321e42e1e86ab10dabb7e338f2a5f9ac232043762317d7a5b82b0096ec6853a2ede14f1c34c6fa0becc07f706f93a4a89e2835e36fe982c06bb326675d373f8125e11f32585729151d50c9628fd44461c52eecc107364faf27f575693ad122f847745b6df733e8f099fae3e2c8fcf4e8c3d54bff235a85d396e29a80d4f7c29305c9fb1700e45958d4f5ea043561dee887c816ddc14f900623161fee1bedb9ade4dd79606015eaae987f7776be5b17c8c5769c1ed5e86cca5828fd075cf62fca303b81d5b185200462b981105e636bae6c6ba95d2fe710047cf230c6f712508d3cbbed1847852c4c6f15f54bbb268a6dec896ec39f35780288a247beefe82630d924b267f71371ef299b281b7322d6dc031daad0d787a1aab14e3745da17c271652de3503346d2ef35ab0286eb30072b3343cbda473fd4afe7ed070832fbcedfa4e1a46ec31380610a5c059956a2cdc5af4264130bf4526e1eeeba976296c8c8ca535f65f72a543136114b098e7733806faa6721bce5b01317689e249b2b080d58a438be66f0fe09a8bde28390c4ad7fe612f114da08cbced2e9603a80b250c5cd09058f1f3c5ac075532e50b860e10aaa3ed52f8ef8683595b6314af2caa1183ecd040b0c0485064ba101878af0da07c5e979a2dc17ad78d54b5ebc27b6d56c5859ef3b9855ab30cdf84cc5cf8f4474c8cc5d46fb8782c5c50a206f07b375311ee2be2d02af3d36c4d168050d7d3fe0de90260ff32b1c2e42c30dd9e032ecfc5331dd0fcf0d8b61f61ce91871f835ab6d0872e4199f992d3828759da909bc4652c1a3f428bdae096189422dff175b90412cc4bd8b019ea8809cb8631e8e2a0fd3f2244c8dcd01fe25f227bd3d6c32fbe91dc9828ddec01c6c36a82761e22a1171aeb69bf8a6e1ace386e8fdb83fd396359e87a897f9b159ccdf153fcac055d350f555597c031de92fac5be00ed51425e4a9da0cc56eeb82b5facc5931db59288ef59ccc6377f8f2307998fa47e7a374fd8abc375581e82bf8d621d68f4d83efd1c1007a972560726ecf5f842df69f5d246f27a08b286bce46ede658b3792d2952422cbd5ce6362b453c80eeba2f8c4aa7aaf184057f69956fc1e8b4fb2d37602c6065d795133f7ee7c3d35c4d4be15967fc8f0ce6df02086426e3d02ac27572674a10ca7945dbf8433d6420c4336798cfb195333990b036bbb9382206255824c50394cbc0fce0c843a8a83b85e56a3d1d8ed30bd42f77b33c6d47f1c4ffdda819cc7e0cc960be05b76ecd9367690d5d654d890ddbcd46c989fa9f2be9871f8887ea0d4abc286abbb5c2786be298960515c518515dce612cd7ea43ce86c79dee79441fd127299021a400f44ac0656bc8d2e62749b2139b106aceae34255ff50c1926392328538b90d9db69b2ab3cbd79f2c2e5da7352f4436bcef9d0367ebc6c6629ee46ece5f8e111653eaec9a483c7683761bba5c51bcbd1768773a96b37bb07abb60d989a85a536614963a5d5350d59961341ff328c04ca36800b0312a839a347381762820fd000a0fca35f6f474e3eb4910c41fc1ba0f2639c7be43964867b7deea7e276c7850813be459f461626b4fb0387e6ed2b238b4172887e72e1bd6eea8e92096f916dd02575b9fa0aab3aa08cb0879c528df62e3d0c669d23bf602f0941a1bb79c6b842cc189e33451760b55c97885c5ac0eb586e2586fa0c987a074a01a62e5fcc872eff97812ab9b386fc32d6adaff735fc585c38663cfa86ed6799821ff093b07e9753bc6673f8e63a9aa0ced12ce9bd486fff1b2482f1001e7f482c51dd914c23ffc7bef8a55aa4a1064026b3a5c878aedbddce708a12cd02cd0503c5239ec75c457a70df6b5cd02535c3d31b8f70c67e8b5837d8b139b506ce6a10aa676fa4eac419caadf1a26fdca8dae7c34fce5056bdf6f9b02c8c9899805b61fde2881750dd7342569b60840c217d01e4175c0c2746f0c8b972d6b632972ad2989b265c02f76e9dbfd45fcc49b9edf775611b77f594b405908c6f7d0284c15729dd785ac123925dc09a04bc7f21c44c7b327ba072618afe2eb38b79ec644a1868853d131493f0a9ab7c5449b608da55e5d5a612f8e476f16c80f851cd536a4f900e6dfcfd5b25ef9fdf4a47ec3af0975ddd475d4a79367fa5ed83817e1497fb8af987a5631ad85afdcd290625d387a97a204ece140e338635b043391de526115ddd45ea1cbfd0288ee5f5ebaff8e45eb5e8ceaf321af3aea62f5068e95b7ee70b6f1b01a059e51ae3056ea3b7d9b43"})
r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0xb46, 0x5, 0xc9a, 0x4, 0xa, "e585125220f0b1a2f8fb0000009200"})
r10 = syz_open_pts(r9, 0x4000000000076146)
dup3(r10, r8, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r8, 0x0, 0x0)

[ 2582.660724][T32505] xt_cluster_mt_checkentry: 40 callbacks suppressed
[ 2582.660743][T32505] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2582.697426][T32511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
17:02:14 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9402]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2582.715838][T32507] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2582.766360][T32517] hub 9-0:1.0: USB hub found
[ 2582.781947][T32511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2582.794317][T32507] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2582.831136][T32517] hub 9-0:1.0: 8 ports detected
[ 2582.889838][T32520] hub 9-0:1.0: USB hub found
[ 2582.895386][T32520] hub 9-0:1.0: 8 ports detected
[ 2582.902805][T32526] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:15 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x400448dd, 0x20000000)

17:02:15 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:15 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x48}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:15 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$binfmt_aout(r2, &(0x7f0000000280)={{0x108, 0x4, 0x2, 0x1a9, 0xd3, 0x4, 0x218, 0x8001}, "41fd8aa6cd1db272b1649776990c28c997f80f20559f770fb78969167650fc3bdabb725cda925f9194d34c00e420a0e8b37fd006c2ef209f0b8861fd09d64c9b22ed777c20f45a060ae560689181e5e11a8a0976c5f456713e32e5a30eb672c33025a03f1dbf29c642b2a678c7cb38eaa66f57c9252d793ffa01681c4b2e", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x59e)
write$P9_RATTACH(r0, 0x0, 0x0)

[ 2583.282135][T32541] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2583.297058][T32543] xt_check_match: 9 callbacks suppressed
[ 2583.297077][T32543] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2583.317081][T32545] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2583.410530][T32545] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2583.489587][T32561] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:15 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5422, 0x1)

17:02:15 executing program 3:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:15 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x355]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:15 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x4c}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2583.708044][T32575] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2583.735746][T32576] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:15 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc601]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2583.748702][T32577] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2583.767937][T32574] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2583.783220][T32581] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:16 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x400454ca, 0x20000000)

17:02:16 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0xffffffff, 0xfffffffb, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000083)
dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe)
write$P9_RATTACH(r0, 0x0, 0x0)

17:02:16 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xca01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:16 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:16 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x50}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:16 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2584.309559][T32604] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2584.410060][T32611] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:16 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5423, 0x1)

17:02:16 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1) (fail_nth: 1)

17:02:16 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:16 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x55}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:16 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0xed00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2584.810743][T32628] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2584.864713][T32636] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2584.869816][T32635] FAULT_INJECTION: forcing a failure.
[ 2584.869816][T32635] name failslab, interval 1, probability 0, space 0, times 0
[ 2584.888054][T32635] CPU: 0 PID: 32635 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2584.896563][T32635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2584.906711][T32635] Call Trace:
[ 2584.909991][T32635]  <TASK>
[ 2584.912918][T32635]  dump_stack_lvl+0xcd/0x134
[ 2584.917521][T32635]  should_fail.cold+0x5/0xa
[ 2584.922030][T32635]  ? tomoyo_realpath_from_path+0xc3/0x620
[ 2584.927756][T32635]  should_failslab+0x5/0x10
[ 2584.932265][T32635]  __kmalloc+0x72/0x340
[ 2584.936433][T32635]  tomoyo_realpath_from_path+0xc3/0x620
[ 2584.941987][T32635]  ? tomoyo_profile+0x42/0x50
[ 2584.946679][T32635]  tomoyo_path_number_perm+0x1d5/0x590
[ 2584.952139][T32635]  ? tomoyo_path_number_perm+0x18d/0x590
[ 2584.957779][T32635]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 2584.963593][T32635]  ? check_path.constprop.0+0x50/0x50
[ 2584.968972][T32635]  ? lock_downgrade+0x6e0/0x6e0
[ 2584.973826][T32635]  ? __fget_files+0x23d/0x3e0
[ 2584.978505][T32635]  security_file_ioctl+0x50/0xb0
[ 2584.983436][T32635]  __x64_sys_ioctl+0xb3/0x200
[ 2584.988108][T32635]  do_syscall_64+0x35/0xb0
[ 2584.992519][T32635]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2584.998406][T32635] RIP: 0033:0x7f6ba5a61ae9
[ 2585.002816][T32635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2585.022427][T32635] RSP: 002b:00007f6ba2fb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2585.030836][T32635] RAX: ffffffffffffffda RBX: 00007f6ba5b75020 RCX: 00007f6ba5a61ae9
[ 2585.038797][T32635] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000003
[ 2585.046848][T32635] RBP: 00007f6ba2fb61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2585.054803][T32635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
17:02:17 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x391]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2585.062763][T32635] R13: 00007fff22a76ecf R14: 00007f6ba2fb6300 R15: 0000000000022000
[ 2585.070827][T32635]  </TASK>
[ 2585.074132][T32635] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2585.242138][T32646] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2585.272410][T32650] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:17 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:17 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:17 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4004550a, 0x20000000)

17:02:17 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:17 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:17 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5424, 0x1)

17:02:17 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x68}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:17 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:17 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1) (fail_nth: 2)

17:02:17 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2585.908244][T32692] FAULT_INJECTION: forcing a failure.
[ 2585.908244][T32692] name failslab, interval 1, probability 0, space 0, times 0
[ 2585.921666][T32692] CPU: 1 PID: 32692 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2585.930093][T32692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2585.940149][T32692] Call Trace:
[ 2585.943427][T32692]  <TASK>
[ 2585.946359][T32692]  dump_stack_lvl+0xcd/0x134
[ 2585.950966][T32692]  should_fail.cold+0x5/0xa
[ 2585.955479][T32692]  ? tomoyo_encode2.part.0+0xe9/0x3a0
[ 2585.960855][T32692]  should_failslab+0x5/0x10
[ 2585.965365][T32692]  __kmalloc+0x72/0x340
[ 2585.969535][T32692]  tomoyo_encode2.part.0+0xe9/0x3a0
[ 2585.974747][T32692]  tomoyo_encode+0x28/0x50
[ 2585.979169][T32692]  tomoyo_realpath_from_path+0x186/0x620
[ 2585.984897][T32692]  ? tomoyo_profile+0x42/0x50
[ 2585.989589][T32692]  tomoyo_path_number_perm+0x1d5/0x590
[ 2585.995051][T32692]  ? tomoyo_path_number_perm+0x18d/0x590
[ 2586.000697][T32692]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 2586.006613][T32692]  ? check_path.constprop.0+0x50/0x50
[ 2586.012025][T32692]  ? lock_downgrade+0x6e0/0x6e0
[ 2586.016990][T32692]  ? __fget_files+0x23d/0x3e0
[ 2586.021688][T32692]  security_file_ioctl+0x50/0xb0
[ 2586.026649][T32692]  __x64_sys_ioctl+0xb3/0x200
[ 2586.031352][T32692]  do_syscall_64+0x35/0xb0
[ 2586.035780][T32692]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2586.041686][T32692] RIP: 0033:0x7f6ba5a61ae9
[ 2586.046109][T32692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2586.065727][T32692] RSP: 002b:00007f6ba2fb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2586.074248][T32692] RAX: ffffffffffffffda RBX: 00007f6ba5b75020 RCX: 00007f6ba5a61ae9
[ 2586.082405][T32692] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000003
[ 2586.090386][T32692] RBP: 00007f6ba2fb61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2586.098362][T32692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
17:02:18 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2586.106423][T32692] R13: 00007fff22a76ecf R14: 00007f6ba2fb6300 R15: 0000000000022000
[ 2586.114511][T32692]  </TASK>
[ 2586.118717][T32692] ERROR: Out of memory at tomoyo_realpath_from_path.
17:02:18 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x6c}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:18 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:18 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x40049409, 0x20000000)

17:02:18 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:18 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:18 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:18 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5425, 0x1)

17:02:18 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x74}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:18 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2801]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:18 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1) (fail_nth: 3)

17:02:18 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:19 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:19 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x7a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2587.027277][T32749] FAULT_INJECTION: forcing a failure.
[ 2587.027277][T32749] name failslab, interval 1, probability 0, space 0, times 0
[ 2587.027616][T32749] 
[ 2587.027620][T32749] ======================================================
[ 2587.027627][T32749] WARNING: possible circular locking dependency detected
[ 2587.027634][T32749] 5.15.0-syzkaller #0 Not tainted
[ 2587.027643][T32749] ------------------------------------------------------
[ 2587.027649][T32749] syz-executor.3/32749 is trying to acquire lock:
[ 2587.027659][T32749] ffffffff8b892b00 (console_owner){-.-.}-{0:0}, at: console_unlock+0x303/0xb70
[ 2587.027709][T32749] 
[ 2587.027709][T32749] but task is already holding lock:
[ 2587.027713][T32749] ffff88807b7d3958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0
[ 2587.027760][T32749] 
[ 2587.027760][T32749] which lock already depends on the new lock.
[ 2587.027760][T32749] 
[ 2587.027765][T32749] 
[ 2587.027765][T32749] the existing dependency chain (in reverse order) is:
[ 2587.027771][T32749] 
[ 2587.027771][T32749] -> #2 (&port->lock){-.-.}-{2:2}:
[ 2587.027794][T32749]        _raw_spin_lock_irqsave+0x39/0x50
[ 2587.027818][T32749]        tty_port_tty_get+0x1f/0x100
[ 2587.027843][T32749]        tty_port_default_wakeup+0x11/0x40
[ 2587.027864][T32749]        serial8250_tx_chars+0x4f3/0xad0
[ 2587.027887][T32749]        serial8250_handle_irq.part.0+0x328/0x3d0
[ 2587.027912][T32749]        serial8250_default_handle_irq+0xb2/0x220
[ 2587.027936][T32749]        serial8250_interrupt+0xfd/0x200
[ 2587.027957][T32749]        __handle_irq_event_percpu+0x303/0x8f0
[ 2587.027980][T32749]        handle_irq_event+0x102/0x280
[ 2587.028003][T32749]        handle_edge_irq+0x25f/0xd00
[ 2587.028022][T32749]        __common_interrupt+0x9d/0x210
[ 2587.028046][T32749]        common_interrupt+0xa4/0xc0
[ 2587.028066][T32749]        asm_common_interrupt+0x1e/0x40
[ 2587.028089][T32749]        acpi_idle_do_entry+0x1c6/0x250
[ 2587.028111][T32749]        acpi_idle_enter+0x361/0x500
[ 2587.028135][T32749]        cpuidle_enter_state+0x1b1/0xc80
[ 2587.028160][T32749]        cpuidle_enter+0x4a/0xa0
[ 2587.028183][T32749]        do_idle+0x3e8/0x590
[ 2587.028201][T32749]        cpu_startup_entry+0x14/0x20
[ 2587.028220][T32749]        start_kernel+0x47a/0x49b
[ 2587.028243][T32749]        secondary_startup_64_no_verify+0xb0/0xbb
[ 2587.028267][T32749] 
[ 2587.028267][T32749] -> #1 (&port_lock_key){-.-.}-{2:2}:
[ 2587.028290][T32749]        _raw_spin_lock_irqsave+0x39/0x50
[ 2587.028313][T32749]        serial8250_console_write+0x91a/0xb70
[ 2587.028336][T32749]        console_unlock+0x7a9/0xb70
[ 2587.028355][T32749]        vprintk_emit+0x198/0x4f0
[ 2587.028375][T32749]        vprintk+0x80/0x90
[ 2587.028395][T32749]        _printk+0xba/0xed
[ 2587.028410][T32749]        register_console+0x55f/0x780
[ 2587.028431][T32749]        univ8250_console_init+0x3a/0x46
[ 2587.028451][T32749]        console_init+0x3c1/0x58d
[ 2587.028473][T32749]        start_kernel+0x30b/0x49b
[ 2587.028497][T32749]        secondary_startup_64_no_verify+0xb0/0xbb
[ 2587.028522][T32749] 
[ 2587.028522][T32749] -> #0 (console_owner){-.-.}-{0:0}:
[ 2587.028544][T32749]        __lock_acquire+0x2a07/0x54a0
[ 2587.028565][T32749]        lock_acquire+0x1ab/0x510
[ 2587.028585][T32749]        console_unlock+0x356/0xb70
[ 2587.028605][T32749]        vprintk_emit+0x198/0x4f0
[ 2587.028625][T32749]        vprintk+0x80/0x90
[ 2587.028645][T32749]        _printk+0xba/0xed
[ 2587.028659][T32749]        should_fail+0x472/0x5a0
[ 2587.028682][T32749]        should_failslab+0x5/0x10
[ 2587.028703][T32749]        __kmalloc+0x72/0x340
[ 2587.028721][T32749]        tty_buffer_alloc+0x23f/0x2a0
[ 2587.028740][T32749]        __tty_buffer_request_room+0x156/0x2a0
[ 2587.028760][T32749]        tty_insert_flip_string_fixed_flag+0x93/0x250
[ 2587.028782][T32749]        pty_write+0x11c/0x1e0
[ 2587.028802][T32749]        n_hdlc_send_frames+0x24b/0x490
[ 2587.028824][T32749]        tty_wakeup+0xe1/0x120
[ 2587.028851][T32749]        __start_tty+0xfb/0x130
[ 2587.028873][T32749]        n_tty_ioctl_helper+0x299/0x2d0
[ 2587.028891][T32749]        n_hdlc_tty_ioctl+0xd2/0x340
[ 2587.028910][T32749]        tty_ioctl+0xc69/0x1670
[ 2587.028930][T32749]        __x64_sys_ioctl+0x193/0x200
[ 2587.028948][T32749]        do_syscall_64+0x35/0xb0
[ 2587.028962][T32749]        entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2587.028981][T32749] 
[ 2587.028981][T32749] other info that might help us debug this:
[ 2587.028981][T32749] 
[ 2587.028984][T32749] Chain exists of:
[ 2587.028984][T32749]   console_owner --> &port_lock_key --> &port->lock
[ 2587.028984][T32749] 
[ 2587.029005][T32749]  Possible unsafe locking scenario:
[ 2587.029005][T32749] 
[ 2587.029008][T32749]        CPU0                    CPU1
[ 2587.029011][T32749]        ----                    ----
[ 2587.029015][T32749]   lock(&port->lock);
[ 2587.029024][T32749]                                lock(&port_lock_key);
[ 2587.029034][T32749]                                lock(&port->lock);
[ 2587.029044][T32749]   lock(console_owner);
[ 2587.029052][T32749] 
[ 2587.029052][T32749]  *** DEADLOCK ***
[ 2587.029052][T32749] 
[ 2587.029056][T32749] 5 locks held by syz-executor.3/32749:
[ 2587.029067][T32749]  #0: ffff888076eed098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80
[ 2587.029103][T32749]  #1: ffff888076eed468 (&tty->flow.lock){....}-{2:2}, at: n_tty_ioctl_helper+0xb6/0x2d0
[ 2587.029139][T32749]  #2: ffff888076eed098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1d/0x80
[ 2587.029174][T32749]  #3: ffff88807b7d3958 (&port->lock){-.-.}-{2:2}, at: pty_write+0xea/0x1e0
[ 2587.029209][T32749]  #4: ffffffff8b972f40 (console_lock){+.+.}-{0:0}, at: vprintk+0x80/0x90
[ 2587.029244][T32749] 
[ 2587.029244][T32749] stack backtrace:
[ 2587.029248][T32749] CPU: 1 PID: 32749 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2587.029265][T32749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2587.029274][T32749] Call Trace:
[ 2587.029279][T32749]  <TASK>
[ 2587.029285][T32749]  dump_stack_lvl+0xcd/0x134
[ 2587.029304][T32749]  check_noncircular+0x25f/0x2e0
[ 2587.029322][T32749]  ? filter_irq_stacks+0x90/0x90
[ 2587.029343][T32749]  ? print_circular_bug+0x1e0/0x1e0
[ 2587.029363][T32749]  ? memcpy+0x39/0x60
[ 2587.029385][T32749]  ? lockdep_lock+0xc6/0x200
[ 2587.029401][T32749]  ? call_rcu_zapped+0xb0/0xb0
[ 2587.029420][T32749]  __lock_acquire+0x2a07/0x54a0
[ 2587.029444][T32749]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 2587.029464][T32749]  ? check_path.constprop.0+0x50/0x50
[ 2587.029487][T32749]  lock_acquire+0x1ab/0x510
[ 2587.029507][T32749]  ? console_unlock+0x303/0xb70
[ 2587.029529][T32749]  ? lock_release+0x720/0x720
[ 2587.029549][T32749]  ? lock_downgrade+0x6e0/0x6e0
[ 2587.029570][T32749]  ? do_raw_spin_lock+0x120/0x2b0
[ 2587.029591][T32749]  ? rwlock_bug.part.0+0x90/0x90
[ 2587.029617][T32749]  console_unlock+0x356/0xb70
[ 2587.029637][T32749]  ? console_unlock+0x303/0xb70
[ 2587.029658][T32749]  ? devkmsg_read+0x730/0x730
[ 2587.029678][T32749]  ? lock_release+0x720/0x720
[ 2587.029704][T32749]  ? vprintk+0x80/0x90
[ 2587.029728][T32749]  vprintk_emit+0x198/0x4f0
[ 2587.029748][T32749]  ? kasan_save_stack+0x1e/0x50
[ 2587.029774][T32749]  vprintk+0x80/0x90
[ 2587.029796][T32749]  _printk+0xba/0xed
[ 2587.029812][T32749]  ? record_print_text.cold+0x16/0x16
[ 2587.029836][T32749]  ? ___ratelimit+0x222/0x4b0
[ 2587.029869][T32749]  should_fail+0x472/0x5a0
[ 2587.029894][T32749]  ? tty_buffer_alloc+0x23f/0x2a0
[ 2587.029914][T32749]  should_failslab+0x5/0x10
[ 2587.029935][T32749]  __kmalloc+0x72/0x340
[ 2587.029958][T32749]  tty_buffer_alloc+0x23f/0x2a0
[ 2587.029980][T32749]  __tty_buffer_request_room+0x156/0x2a0
[ 2587.030005][T32749]  tty_insert_flip_string_fixed_flag+0x93/0x250
[ 2587.030034][T32749]  pty_write+0x11c/0x1e0
[ 2587.030055][T32749]  ? do_raw_spin_unlock+0x171/0x230
[ 2587.030077][T32749]  ? pty_set_termios+0x520/0x520
[ 2587.030100][T32749]  n_hdlc_send_frames+0x24b/0x490
[ 2587.030125][T32749]  ? n_hdlc_send_frames+0x490/0x490
[ 2587.030148][T32749]  tty_wakeup+0xe1/0x120
[ 2587.030168][T32749]  ? pty_show_fdinfo+0x50/0x50
[ 2587.030188][T32749]  __start_tty+0xfb/0x130
[ 2587.030211][T32749]  n_tty_ioctl_helper+0x299/0x2d0
[ 2587.030231][T32749]  n_hdlc_tty_ioctl+0xd2/0x340
[ 2587.030256][T32749]  tty_ioctl+0xc69/0x1670
[ 2587.030278][T32749]  ? n_hdlc_tty_open+0x3f0/0x3f0
[ 2587.030303][T32749]  ? tty_lookup_driver+0x550/0x550
[ 2587.030331][T32749]  ? lock_downgrade+0x6e0/0x6e0
[ 2587.030359][T32749]  ? __fget_files+0x23d/0x3e0
[ 2587.030384][T32749]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2587.030408][T32749]  ? tty_lookup_driver+0x550/0x550
17:02:19 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5427, 0x1)

[ 2587.030435][T32749]  __x64_sys_ioctl+0x193/0x200
[ 2587.030459][T32749]  do_syscall_64+0x35/0xb0
[ 2587.030478][T32749]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2587.030504][T32749] RIP: 0033:0x7f6ba5a61ae9
[ 2587.030521][T32749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2587.030541][T32749] RSP: 002b:00007f6ba2fb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2587.030561][T32749] RAX: ffffffffffffffda RBX: 00007f6ba5b75020 RCX: 00007f6ba5a61ae9
[ 2587.030576][T32749] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000003
[ 2587.030588][T32749] RBP: 00007f6ba2fb61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2587.030601][T32749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2587.030613][T32749] R13: 00007fff22a76ecf R14: 00007f6ba2fb6300 R15: 0000000000022000
[ 2587.030635][T32749]  </TASK>
[ 2587.923791][T32749] CPU: 1 PID: 32749 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[ 2587.932471][T32749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2587.942613][T32749] Call Trace:
[ 2587.945886][T32749]  <TASK>
[ 2587.948812][T32749]  dump_stack_lvl+0xcd/0x134
[ 2587.953422][T32749]  should_fail.cold+0x5/0xa
[ 2587.957931][T32749]  ? tty_buffer_alloc+0x23f/0x2a0
[ 2587.962960][T32749]  should_failslab+0x5/0x10
[ 2587.967473][T32749]  __kmalloc+0x72/0x340
[ 2587.971638][T32749]  tty_buffer_alloc+0x23f/0x2a0
[ 2587.976492][T32749]  __tty_buffer_request_room+0x156/0x2a0
[ 2587.982132][T32749]  tty_insert_flip_string_fixed_flag+0x93/0x250
[ 2587.988383][T32749]  pty_write+0x11c/0x1e0
[ 2587.992626][T32749]  ? do_raw_spin_unlock+0x171/0x230
[ 2587.997856][T32749]  ? pty_set_termios+0x520/0x520
[ 2588.002802][T32749]  n_hdlc_send_frames+0x24b/0x490
[ 2588.007849][T32749]  ? n_hdlc_send_frames+0x490/0x490
[ 2588.013285][T32749]  tty_wakeup+0xe1/0x120
[ 2588.017672][T32749]  ? pty_show_fdinfo+0x50/0x50
[ 2588.022443][T32749]  __start_tty+0xfb/0x130
[ 2588.026781][T32749]  n_tty_ioctl_helper+0x299/0x2d0
[ 2588.031811][T32749]  n_hdlc_tty_ioctl+0xd2/0x340
[ 2588.036594][T32749]  tty_ioctl+0xc69/0x1670
[ 2588.040928][T32749]  ? n_hdlc_tty_open+0x3f0/0x3f0
[ 2588.045872][T32749]  ? tty_lookup_driver+0x550/0x550
[ 2588.050998][T32749]  ? lock_downgrade+0x6e0/0x6e0
[ 2588.055870][T32749]  ? __fget_files+0x23d/0x3e0
[ 2588.060556][T32749]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[ 2588.066802][T32749]  ? tty_lookup_driver+0x550/0x550
[ 2588.071923][T32749]  __x64_sys_ioctl+0x193/0x200
[ 2588.076695][T32749]  do_syscall_64+0x35/0xb0
[ 2588.081114][T32749]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 2588.087022][T32749] RIP: 0033:0x7f6ba5a61ae9
[ 2588.091435][T32749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2588.111051][T32749] RSP: 002b:00007f6ba2fb6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2588.119470][T32749] RAX: ffffffffffffffda RBX: 00007f6ba5b75020 RCX: 00007f6ba5a61ae9
[ 2588.127441][T32749] RDX: 0000000000000001 RSI: 000000000000540a RDI: 0000000000000003
[ 2588.135414][T32749] RBP: 00007f6ba2fb61d0 R08: 0000000000000000 R09: 0000000000000000
[ 2588.143396][T32749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2588.151377][T32749] R13: 00007fff22a76ecf R14: 00007f6ba2fb6300 R15: 0000000000022000
[ 2588.159366][T32749]  </TASK>
[ 2588.196196][T32750] xt_cluster_mt_checkentry: 34 callbacks suppressed
[ 2588.196216][T32750] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:20 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x40085503, 0x20000000)

17:02:20 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x88}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2588.326699][  T309] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.393983][  T314] xt_check_match: 11 callbacks suppressed
[ 2588.393998][  T314] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2588.420154][  T313] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.440876][  T318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2588.457666][  T313] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:20 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0xe8}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2588.511628][  T322] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.590187][  T329] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.600373][  T330] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2588.625945][  T333] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:20 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540a, 0x1)

17:02:20 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2588.631114][  T337] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2588.679255][  T329] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:20 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0xec}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5002]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:20 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5428, 0x1)

[ 2588.794965][  T346] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.896334][  T357] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2588.906379][  T358] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2588.940270][  T362] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:21 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x128}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:21 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x40086602, 0x20000000)

17:02:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5500]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x55]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2589.360836][  T378] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:21 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x12e}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:21 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x2, 0x1)

17:02:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x60]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:21 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x143}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2589.611490][  T403] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2589.624979][ T1185] ieee802154 phy0 wpan0: encryption failed: -22
[ 2589.631249][ T1185] ieee802154 phy1 wpan1: encryption failed: -22
17:02:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:21 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5429, 0x1)

17:02:21 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:21 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2589.934836][  T435] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2590.001852][  T441] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:22 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x40095505, 0x20000000)

17:02:22 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x1a4}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x74]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:22 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x1aa}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:22 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x10, 0x1)

17:02:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x88]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:22 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5437, 0x1)

17:02:22 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe8]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:22 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x40186366, 0x20000000)

17:02:23 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x1c6}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xed]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:23 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a03]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5441, 0x1)

17:02:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x128]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:23 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4c00, 0x1)

17:02:23 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x1ca}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12e]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:23 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:23 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x143]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:24 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x401c5820, 0x20000000)

17:02:24 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d02]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:24 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x234}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1a4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:24 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5450, 0x1)

17:02:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1aa]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:24 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9103]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:24 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4c01, 0x1)

17:02:24 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x250}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1c6]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:24 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa401]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:24 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1ca]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:25 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x4020940d, 0x20000000)

17:02:25 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x258}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:25 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa01]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:25 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x234]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:25 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5451, 0x1)

17:02:25 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb503]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2593.351589][  T618] xt_cluster_mt_checkentry: 49 callbacks suppressed
[ 2593.351608][  T618] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.377298][  T613] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:25 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x250]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2593.442509][  T613] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.472494][  T631] xt_check_match: 20 callbacks suppressed
[ 2593.472517][  T631] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:25 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5409, 0x1)

17:02:25 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x268}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2593.548560][  T633] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:25 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x258]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:25 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb802]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2593.673430][  T643] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.712201][  T643] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:25 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x28a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2593.722155][  T648] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.744016][  T653] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2593.769448][  T654] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.868340][  T658] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
[ 2593.919277][  T658] xt_cluster: you have exceeded the maximum number of cluster nodes (1792 > 32)
17:02:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x41015500, 0x20000000)

17:02:26 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x268]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:26 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe800]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:26 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x290}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5452, 0x1)

[ 2594.335933][  T674] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:26 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x28a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2594.380493][  T682] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:26 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x294}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:26 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:26 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540b, 0x1)

17:02:26 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x290]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2594.582900][  T696] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:26 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x29a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2594.659320][  T702] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:26 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x294]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:27 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x80045432, 0x20000000)

17:02:27 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:27 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x300}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x29a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:27 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x545d, 0x1)

17:02:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

[ 2595.353933][  T736] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[ 2595.412705][  T744] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:27 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x321}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:27 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:27 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x321]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:27 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540c, 0x1)

[ 2595.580081][  T763] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:27 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x328}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:27 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 2595.801190][  T782] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
17:02:28 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x80045440, 0x20000000)

17:02:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x328]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:28 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:28 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x37a}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:28 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x5460, 0x1)

17:02:28 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x37a]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:28 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x390}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:28 executing program 4:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x84000180, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x390]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)

17:02:28 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00')
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "20000000000034790400"})
r2 = syz_open_pts(r1, 0x4000000000000002)
r3 = dup3(r2, r0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TCXONC(r3, 0x540a, 0x0)
write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde)
ioctl$TCXONC(r3, 0x540d, 0x1)

17:02:28 executing program 0:
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x700, 0x0, 0x391}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

17:02:28 executing program 5:
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x140, 0x140, 0x0, 0x0, 0x250, 0x1d8, 0x1d8, 0x250, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50]}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_vlan\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x7, {}, [@common=@inet=@tcp={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348)
getpid()
io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)