xt_CT: You must specify a L4 protocol and not use inversions on it jump_label: Fatal kernel bug, unexpected op at ipt_do_table+0x3ed/0x1aa0 [ffffffff899cfd0d] (e9 ce 0b 00 00 != 0f 1f 44 00 00)) size:5 type:1 ------------[ cut here ]------------ kernel BUG at arch/x86/kernel/jump_label.c:73! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 UID: 0 PID: 8344 Comm: syz-executor233 Not tainted 6.11.0-rc1-syzkaller-00233-g948752d2e010 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:__jump_label_patch+0x378/0x400 arch/x86/kernel/jump_label.c:73 Code: 48 c7 c3 60 40 24 93 e8 56 84 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 60 38 46 8b e8 89 f7 39 00 90 <0f> 0b e8 31 84 59 00 90 0f 0b e8 29 84 59 00 90 0f 0b 48 c7 c7 70 RSP: 0018:ffffc9000b357710 EFLAGS: 00010286 RAX: 000000000000008d RBX: ffffffff8b466eea RCX: ffffffff816b0039 RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 RBP: ffffc9000b357758 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000005 R13: 0000000000000001 R14: ffffffff899cfd0d R15: 00000000000000da FS: 0000555590a8c380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 000000007a49e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: arch_jump_label_transform_queue+0x7e/0x120 arch/x86/kernel/jump_label.c:137 __jump_label_update+0x125/0x420 kernel/jump_label.c:493 jump_label_update+0x1d7/0x400 kernel/jump_label.c:900 __static_key_slow_dec_cpuslocked.part.0+0x4e/0x90 kernel/jump_label.c:293 __static_key_slow_dec_cpuslocked kernel/jump_label.c:288 [inline] __static_key_slow_dec kernel/jump_label.c:301 [inline] static_key_slow_dec+0x7c/0xc0 kernel/jump_label.c:316 cleanup_entry+0x296/0x3a0 net/ipv6/netfilter/ip6_tables.c:669 translate_table+0xddd/0x17b0 net/ipv6/netfilter/ip6_tables.c:744 do_replace net/ipv6/netfilter/ip6_tables.c:1154 [inline] do_ip6t_set_ctl+0x605/0xc40 net/ipv6/netfilter/ip6_tables.c:1644 nf_setsockopt+0x8a/0xf0 net/netfilter/nf_sockopt.c:101 ipv6_setsockopt+0x133/0x1a0 net/ipv6/ipv6_sockglue.c:998 tcp_setsockopt+0xa4/0x100 net/ipv4/tcp.c:3768 do_sock_setsockopt+0x222/0x480 net/socket.c:2324 __sys_setsockopt+0x1a4/0x270 net/socket.c:2347 __do_sys_setsockopt net/socket.c:2356 [inline] __se_sys_setsockopt net/socket.c:2353 [inline] __x64_sys_setsockopt+0xbd/0x160 net/socket.c:2353 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fdf7c316429 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd3c097358 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdf7c316429 RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 RBP: 0000000000000000 R08: 0000000000000528 R09: 0000000000000000 R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__jump_label_patch+0x378/0x400 arch/x86/kernel/jump_label.c:73 Code: 48 c7 c3 60 40 24 93 e8 56 84 59 00 45 89 e1 49 89 d8 4c 89 f1 41 55 4c 89 f2 4c 89 f6 48 c7 c7 60 38 46 8b e8 89 f7 39 00 90 <0f> 0b e8 31 84 59 00 90 0f 0b e8 29 84 59 00 90 0f 0b 48 c7 c7 70 RSP: 0018:ffffc9000b357710 EFLAGS: 00010286 RAX: 000000000000008d RBX: ffffffff8b466eea RCX: ffffffff816b0039 RDX: 0000000000000000 RSI: ffffffff816b9416 RDI: 0000000000000005 RBP: ffffc9000b357758 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000000005 R13: 0000000000000001 R14: ffffffff899cfd0d R15: 00000000000000da FS: 0000555590a8c380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020002040 CR3: 000000007a49e000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400